Red Hat Security Advisory

RHSA-2018:3773

ansible security and bug fix update

Released 2018-12-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.7 for RHEL 7 Server ansible-2.7.4-1.el7ae

Fixes 1 record

TI-2018-12069 CVE-2018-16859 · GHSA-v735-2pp6-h86r

Sensitive information in log files in Red Hat ansible

LOW 21

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext.

CVSS 3.0MEDIUM 4.4 Local High privileges No interaction EPSS 0.00535 Published 2018-11-29 Partial fix · 2.7.3, 2.5.12 +1 CWE-532