Red Hat Ansible Engine 2.4
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*
part: a version: 2.4 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Ansible Engine (16c6ea6d-2eb0-5f5b-8a65-adb48f01e2e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ansible |
purl2cpe | 2026-06-01 10:12:54.636626 |
pkg:deb/ubuntu/ansible |
purl2cpe | 2026-06-01 10:12:54.636628 |
pkg:docker/ansible/ansible |
purl2cpe | 2026-06-01 10:12:54.636629 |
pkg:github/ansible/ansible |
purl2cpe | 2026-06-01 10:12:54.636631 |
pkg:rpm/fedora/ansible |
purl2cpe | 2026-06-01 10:12:54.636632 |
pkg:rpm/opensuse/ansible |
purl2cpe | 2026-06-01 10:12:54.636634 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-7750 |
vulnerable | 2026-06-08 05:12:04.058362 |
Details available
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
Published: 2018-03-13T18:00:00.000Z
Updated: 2024-08-05T06:37:58.928Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10875 |
vulnerable | 2026-06-08 05:10:37.267290 |
Details available
HIGH (7.8)
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
Published: 2018-07-13T22:00:00.000Z
Updated: 2024-08-05T07:46:47.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10874 |
vulnerable | 2026-06-08 05:10:37.265117 |
Details available
HIGH (7.8)
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Published: 2018-07-02T13:00:00.000Z
Updated: 2024-08-05T07:46:47.224Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.