4.6
Medium
CVE-2019-10156 A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing…
Description
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ansible | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- [debian-lts-announce] 20190916 [SECURITY] [DLA 1923-1] ansible security update lists.debian.org
- RHSA-2019:3744 access.redhat.com
- RHSA-2019:3789 access.redhat.com
- [debian-lts-announce] 20210127 [SECURITY] [DLA 2535-1] ansible security update lists.debian.org
- DSA-4950 www.debian.org
Timeline
- Published
- Last modified
Other CVEs of Ansible
The 29 CVEs of Ansible →
CVE-2020-14332
A flaw was found in the Ansible Engine when using module_args
5.5
Medium
CVE-2020-14330
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…
5.0
Medium
CVE-2020-10744
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…
5.0
Medium
CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…
5.0
Medium