Red Hat Security AdvisoryRHSA-2019:3203
Ansible security and bug fix update
Released 2019-10-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Engine 2.8 for RHEL 7 Server ansible-2.8.6-1.el7ae
- Red Hat Ansible Engine 2.8 for RHEL 8 ansible-2.8.6-1.el8ae
Fixes 3 records
Priority LOW 35
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00509 · Published 2019-10-08 · Partial fix · 2.6.20, 2.7.14 +1 CWE-117
Priority LOW 32
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01649 · Published 2019-11-26 · Partial fix · 2.8.6, 2.7.14 +1 CWE-287
Priority LOW 25
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00424 · Published 2019-10-14 · Partial fix · 2.9.0rc4, 2.8.6 +2 CWE-117
