Vulnerabilities > Redhat > Ansible > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-07-31 CVE-2016-8628 Command Injection vulnerability in Redhat Ansible
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller.
network
low complexity
redhat CWE-77
critical
9.1
2017-11-21 CVE-2017-7550 Information Exposure Through Log Files vulnerability in Redhat Ansible and Enterprise Linux Server
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module.
network
low complexity
redhat CWE-532
critical
9.8