GCVE - cpe:2.3:a:redhat:ansible_runner:2.0.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ansible_runner:2.0.0:-:*:*:*:*:*:*

part: a version: 2.0.0 update: -

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Ansible Runner (`098a074b-8319-5554-b1ee-c13bcb262710`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/ansible-runner`	purl2cpe	2026-06-01 10:12:54.567623
`pkg:deb/ubuntu/ansible-runner`	purl2cpe	2026-06-01 10:12:54.567624
`pkg:github/ansible/ansible-runner`	purl2cpe	2026-06-01 10:12:54.567625
`pkg:pypi/ansible-runner`	purl2cpe	2026-06-01 10:12:54.567627
`pkg:rpm/fedora/python-ansible-runner`	purl2cpe	2026-06-01 10:12:54.567628
`pkg:rpm/opensuse/python-ansible-runner`	purl2cpe	2026-06-01 10:12:54.567629

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-3702`	vulnerable	2026-06-08 05:33:53.460587	Details available A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality. Published: 2022-08-23T15:51:01.000Z Updated: 2024-08-03T17:01:07.921Z Open on db.gcve.eu Reference links https://github.com/ansible/ansible-runner/pull/742/commits https://bugzilla.redhat.com/show_bug.cgi?id=1977965 https://access.redhat.com/security/cve/CVE-2021-3702	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3701`	vulnerable	2026-06-08 05:33:53.460096	Details available A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity. Published: 2022-08-23T15:50:47.000Z Updated: 2024-08-03T17:01:08.323Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1977959 https://access.redhat.com/security/cve/CVE-2021-3701 https://github.com/ansible/ansible-runner/issues/738 https://github.com/ansible/ansible-runner/pull/742/commits	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.