CVE-2020-25635

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-212

Affected software

Vendor	Product	Versions
AWS Community	Community Collections	from 1.0.0 to 1.2.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635Issue Tracking, Vendor Advisory
https://github.com/ansible-collections/community.aws/issues/222Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635Issue Tracking, Vendor Advisory
https://github.com/ansible-collections/community.aws/issues/222Third Party Advisory

Timeline

Published: Oct 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-256367.1A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are CVE-2020-256376.7A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about net CVE-2020-256387.4A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteri CVE-2020-256394.4A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way th CVE-2020-25645.3Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 19.10 and p CVE-2020-256405.3A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection err CVE-2020-256415.5A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the bloc CVE-2020-256437.2A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by i CVE-2020-256447.5A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacke CVE-2020-256457.5A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is confi CVE-2020-256467.5A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confiden CVE-2020-256477.6A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking