AWS Community

Products

ProductCVEsExploitedLatest
Community Collections2–Oct 5, 2020

Exploited and recent CVEs

  • CVE-2020-25635 Medium 5.0 A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Thi 0.3%
  • CVE-2020-25636 Medium 6.6 A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have 0.3%