Red Hat Security Advisory

RHSA-2019:1708

ansible security and bug fix update

Released 2019-07-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.8 for RHEL 7 Server ansible-2.8.2-1.el7ae
Red Hat Ansible Engine 2.8 for RHEL 8 ansible-2.8.2-1.el8ae

Fixes 1 record

TI-2019-07477 CVE-2019-10156 · GHSA-grgm-pph5-j5h7

Information disclosure in Red Hat ansible

LOW 28

A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01759 Published 2019-07-30 Partial fix · 2.6.18, 2.7.12 +1 CWE-200