CVE-2020-25635: Medium severity red hat ansible vulnerability
A flaw was found in Ansible Base when using the awsssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.
Other sources
A flaw was found in Ansible Base when using the awsssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-25635?
CVE-2020-25635 is a vulnerability in Ansible Base that allows files to remain in the bucket after a playbook run, exposing sensitive data.
How does CVE-2020-25635 affect data confidentiality?
CVE-2020-25635 directly affects data confidentiality by allowing files to remain in the bucket, potentially exposing sensitive information.
What is the severity of CVE-2020-25635?
The severity of CVE-2020-25635 is rated as medium with a severity value of 5.5.
How can I fix CVE-2020-25635?
To fix CVE-2020-25635, update to a version of Ansible Base that includes the fix for the issue.
Where can I find more information about CVE-2020-25635?
You can find more information about CVE-2020-25635 on the Red Hat Bugzilla page and the GitHub issue page.