Vulnerabilities > CVE-2020-25636 - Files or Directories Accessible to External Parties vulnerability in Redhat Ansible 2.10.1
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
HIGH Summary
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |