VDB
GHSA-vp9j-rghq-8jhh
GHSA-vp9j-rghq-8jhh
PUBLISHED
CVSS 5 MEDIUM
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Record from GitHub Advisory Database · Published February 9, 2022
ansible is fixed in 2.10.0rc1, 2.10.0 and 2.9.12 (PyPI)
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ansible | PyPI | 2.10.0rc1, 2.10.0, 2.9.12 |
Risk scores
CVSS 3.1
5
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | ansible | 2.10.0a1, 0 |
| PyPI | ansible | 0, 2.10.0a1 |
Timeline
- Feb 9, 2022 CVE Published
- Mar 3, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-vp9j-rghq-8jhh
vulnetix vdb fixes GHSA-vp9j-rghq-8jhhOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-vp9j-rghq-8jhh/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-10744 advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-208.yaml url
- https://github.com/ansible/ansible/issues/69782 discussion
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744 url
- https://github.com/advisories/GHSA-vp9j-rghq-8jhh vendor-advisory
- https://github.com/ansible/ansible product
- https://github.com/ansible/ansible/commit/ffd3757fc35468a97791e452e7f2d14c3e3fcb80 fix
- https://github.com/ansible/ansible/commit/84afa8e90cd168ff13208c8eae3e533ce7e21e1f fix
- https://github.com/ansible/ansible/commit/77d0effcc5b2da1ef23e4ba32986a9759c27c10d fix