CVE-2020-10685

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchive, win_copy, aws_s3 or copy modules. The temporary directory is created in /tmp leaves the s ts unencrypted. On Operating Systems which /tmp is not a tmpfs but part of the root partition, the directory is only cleared on boot and the decryp emains when the host is switched off. The system will be vulnerable when the system is not running. So decrypted data must be cleared as soon as possible and the data which normally is encrypted ble.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-459

Affected software

Vendor	Product	Versions
Red Hat	Ansible	ansible-engine versions 2.7.x before 2.7.17; ansible-engine 2.8.x before 2.8.11; ansible-engine 2.9.x before 2.9.7; Ansible Tower <= 3.4.5; Ansible Tower <= 3.5.5; Ansible Tower <= 3.6.3

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10685Issue Tracking, Patch, Vendor Advisory
https://github.com/ansible/ansible/pull/68433Patch, Third Party Advisory
https://security.gentoo.org/glsa/202006-11Third Party Advisory
https://www.debian.org/security/2021/dsa-4950Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10685Issue Tracking, Patch, Vendor Advisory
https://github.com/ansible/ansible/pull/68433Patch, Third Party Advisory
https://security.gentoo.org/glsa/202006-11Third Party Advisory
https://www.debian.org/security/2021/dsa-4950Third Party Advisory

Timeline

Published: May 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-106864.7A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. CVE-2020-106874.8A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is poss CVE-2020-106886.1A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly ha CVE-2020-106896.8A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user CVE-2020-10698.8A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web CVE-2020-106906.4There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource dea CVE-2020-106915.2An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. Whe CVE-2020-106935.3A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to CVE-2020-106957.8An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can CVE-2020-106968.8A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious CVE-2020-106974.4A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacker can take advantage CVE-2020-106983.3A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run fr