VDB
DEBIAN-CVE-2020-10729
DEBIAN-CVE-2020-10729
PUBLISHED
CVSS 5.5 MEDIUM
Record from OSV · Published May 27, 2021
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ansible | Debian:12 | 2.9.6+dfsg-1 |
| ansible | Debian:13 | 2.9.6+dfsg-1 |
| ansible | Debian:14 | 2.9.6+dfsg-1 |
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | ansible | 0 |
| Debian:13 | ansible | 0 |
| Debian:14 | ansible | 0 |
Timeline
- May 27, 2021 CVE Published
- Oct 26, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2020-10729
vulnetix vdb fixes DEBIAN-CVE-2020-10729Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2020-10729/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart