~ / search / GHSA-j569-fghw-f9rx

GHSA-j569-fghw-f9rx

Ansible sensitive information disclosure

Source: GitHub Advisory Database (reviewed) High CVE-2018-16876

Packages

EcosystemPackageAffectedFixed in
PyPI ansible < 2.5.14 2.5.14
PyPI ansible >= 2.6.0a1, < 2.6.11 2.6.11
PyPI ansible >= 2.7.0a1, < 2.7.5 2.7.5

Details

As written in the advisory (Markdown source, shown as plain text).

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in `vvv+` mode with no_log on that can lead to leakage of sensible data.

References

External links from the advisory. They lead to third-party sites.