TI-2018-12047 CVE-2018-16837 · GHSA-hwrm-63v2-42g4
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen.
Priority LOW 34
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen.
ansible security and bug fix update
Released 2019-03-18 · Red Hat rating Low · View on Red Hat →
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen.
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.