Red Hat Security Advisory

RHSA-2019:2544

Ansible security update

Released 2019-08-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.7 for RHEL 7 Server ansible-2.7.13-1.el7ae

Fixes 1 record

TI-2019-07526 CVE-2019-10206 · GHSA-cqmr-rcpr-cxh3

Insufficiently protected credentials in Red Hat Ansible

LOW 32

ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01503 Published 2019-11-22 Partial fix · 2.8.4, 2.7.13 +1 CWE-522