{
  "cveId": "CVE-2020-10744",
  "url": "https://patchblox.com/security/cve/CVE-2020-10744",
  "summary": "CVE-2020-10744 is fixed in ansible on 1 platform, first by ansible 2.5.1\u002Bdfsg-1ubuntu0.1\u002Besm1, released September 22, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ansible: An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running...",
  "description": "An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.",
  "published": "2020-05-15T07:15:00Z",
  "severity": "Low",
  "epss": 0.00255,
  "epssPercentile": 0.17228,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ansible",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.5.1\u002Bdfsg-1ubuntu0.1\u002Besm1",
      "fix": "ansible 2.5.1\u002Bdfsg-1ubuntu0.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ansible-2.5.1-dfsg-1ubuntu0.1-esm1",
      "released": "2021-09-22T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ansible",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.9.6\u002Bdfsg-1ubuntu0.1~esm1",
      "fix": "ansible 2.9.6\u002Bdfsg-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ansible-2.9.6-dfsg-1ubuntu0.1-esm1",
      "released": "2022-03-03T11:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}