PatchFirst · Свежие уязвимости
За последние 30 дней в ansible-core опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 22
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.