Red Hat Security Advisory

RHSA-2018:3835

ansible security and bug fix update

Released 2018-12-18 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.5 for RHEL 7 Server ansible-2.5.14-1.el7ae, ansible-doc-2.5.14-1.el7ae

Fixes 1 record

TI-2018-12086 CVE-2018-16876 · GHSA-j569-fghw-f9rx

Information disclosure in Red Hat ansible

LOW 29

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02462 Published 2019-01-03 Partial fix · 2.5.14, 2.6.11 +1 CWE-200