Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat Ansible — RHSA-2019:3207 Clear all filters
TI-2019-11062 CVE-2019-14858 · GHSA-h653-95qw-h2mp

Sensitive information in log files in Red Hat Ansible

Priority LOW 25

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00424 Published 2019-10-14 Partial fix · 2.9.0rc4, 2.8.6 +2 CWE-117
TI-2019-11051 CVE-2019-14846 · GHSA-pm48-cvv2-29q5

Sensitive information in log files in Red Hat Ansible

Priority LOW 35

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00509 Published 2019-10-08 Partial fix · 2.6.20, 2.7.14 +1 CWE-117