UBUNTU-CVE-2020-25635

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2020-25635

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-25635

Upstream

CVE-2020-25635

Published

2020-10-05T14:15:00Z

Modified

2026-01-20T17:14:27.481156Z

Severity

5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - low

Summary

[none]

Details

A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.

References

Affected packages

Ubuntu:24.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@9.2.0+dfsg-0ubuntu5?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.7.0+dfsg-1

7.7.0+dfsg-3

9.*

9.2.0+dfsg-0ubuntu4

9.2.0+dfsg-0ubuntu5

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "9.2.0+dfsg-0ubuntu5"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:25.10

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@12.0.0~b1+dfsg-1?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.2.0+dfsg-1

12.*

12.0.0~a2+dfsg-1

12.0.0~a4+dfsg-1

12.0.0~a6+dfsg-1

12.0.0~b1+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "12.0.0~b1+dfsg-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:Pro:14.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@1.5.4+dfsg-1ubuntu0.1~esm3?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1+dfsg-1

1.3.4+dfsg-1

1.4.0+dfsg-1

1.4.1+dfsg-1

1.4.3+dfsg-1

1.4.4+dfsg-1

1.5.4+dfsg-1

1.5.4+dfsg-1ubuntu0.1~esm1

1.5.4+dfsg-1ubuntu0.1~esm2

1.5.4+dfsg-1ubuntu0.1~esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
        },
        {
            "binary_name": "ansible-fireball",
            "binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
        },
        {
            "binary_name": "ansible-node-fireball",
            "binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:Pro:16.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@2.0.0.2-2ubuntu1.3+esm6?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.9.2+dfsg-2

1.9.4-1

2.*

2.0.0.2-2

2.0.0.2-2ubuntu1

2.0.0.2-2ubuntu1.1

2.0.0.2-2ubuntu1.2

2.0.0.2-2ubuntu1.3

2.0.0.2-2ubuntu1.3+esm1

2.0.0.2-2ubuntu1.3+esm2

2.0.0.2-2ubuntu1.3+esm3

2.0.0.2-2ubuntu1.3+esm4

2.0.0.2-2ubuntu1.3+esm5

2.0.0.2-2ubuntu1.3+esm6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "2.0.0.2-2ubuntu1.3+esm6"
        },
        {
            "binary_name": "ansible-fireball",
            "binary_version": "2.0.0.2-2ubuntu1.3+esm6"
        },
        {
            "binary_name": "ansible-node-fireball",
            "binary_version": "2.0.0.2-2ubuntu1.3+esm6"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:Pro:18.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@2.5.1+dfsg-1ubuntu0.1+esm5?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.1.0+dfsg-2

2.5.0+dfsg-1

2.5.1+dfsg-1

2.5.1+dfsg-1ubuntu0.1

2.5.1+dfsg-1ubuntu0.1+esm1

2.5.1+dfsg-1ubuntu0.1+esm2

2.5.1+dfsg-1ubuntu0.1+esm3

2.5.1+dfsg-1ubuntu0.1+esm4

2.5.1+dfsg-1ubuntu0.1+esm5

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "2.5.1+dfsg-1ubuntu0.1+esm5"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:Pro:20.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@2.9.6+dfsg-1ubuntu0.1~esm3?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.8.3+dfsg-1

2.8.6+dfsg-1

2.9.2+dfsg-1

2.9.4+dfsg-1

2.9.6+dfsg-1

2.9.6+dfsg-1ubuntu0.1~esm1

2.9.6+dfsg-1ubuntu0.1~esm2

2.9.6+dfsg-1ubuntu0.1~esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "2.9.6+dfsg-1ubuntu0.1~esm3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"

Ubuntu:Pro:22.04:LTS

ansible

Package

Name: ansible
Purl: pkg:deb/ubuntu/ansible@2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4?arch=source&distro=esm-apps/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.10.7+merged+base+2.10.8+dfsg-1

2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1

2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ansible",
            "binary_version": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-25635.json"