File Transfer Collision Vulnerability in Ansible Base by Red Hat

CVE-2020-25636

What is CVE-2020-25636?

A flaw in Ansible Base when utilizing the aws_ssm connection plugin leads to a lack of namespace separation for file transfers. This results in files being written directly to the root bucket, which raises the risk of collisions during simultaneous Ansible processes. As a consequence, this vulnerability can significantly compromise the availability of the services dependent on these file transfers.

References