CVE-2020-25636

Katalog CVE

CVSS 7.1 · High EPSS 0,31%

Kerentanan Insecure Temporary File pada redhat ansible. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.

Rincian

Terbit di NVD

5 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-377: Insecure Temporary File
CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 22,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25636 issue tracking · advisory vendor
• https://github.com/ansible-collections/community.aws/issues/221 advisory pihak ketiga