{"id":"CVE-2020-25635","aliases":["GHSA-f556-49jc-4rvc","PYSEC-2020-220"],"url":"https://o3.security/vulnerability/CVE-2020-25635","summary":"Ansible does not collect garbage after playbook run","details":"A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.","published":"2020-10-05T14:15:13.217Z","modified":"2026-08-07T15:12:08.367945Z","cvss":{"score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":{"score":0.00319,"percentile":0.24763,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"ansible","fixedVersion":"2.10.1"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/ansible-collections/community.aws/issues/222"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T15:12:08.367945Z"}}