5.9
Moyenne
CVE-2018-10855 Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks
Description
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ansible | Versions non publiées |
Références
- RHSA-2018:1949 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- RHBA-2018:3788 access.redhat.com
- RHSA-2018:1948 access.redhat.com
- RHSA-2018:2184 access.redhat.com
- RHSA-2018:2022 access.redhat.com
- RHSA-2019:0054 access.redhat.com
- RHSA-2018:2079 access.redhat.com
- RHSA-2018:2585 access.redhat.com
- DSA-4396 www.debian.org
- USN-4072-1 usn.ubuntu.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de ansible
Les 7 CVE de ansible →
CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
6.4
Moyenne
CVE-2018-16837
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen
7.8
Élevée
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe
5.3
Moyenne
CVE-2018-10875
A flaw was found in ansible
7.8
Élevée