4.6
Moyenne
CVE-2019-10156 A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing…
Description
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- [debian-lts-announce] 20190916 [SECURITY] [DLA 1923-1] ansible security update lists.debian.org
- RHSA-2019:3744 access.redhat.com
- RHSA-2019:3789 access.redhat.com
- [debian-lts-announce] 20210127 [SECURITY] [DLA 2535-1] ansible security update lists.debian.org
- DSA-4950 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ansible
Les 29 CVE de Ansible →
CVE-2020-14332
A flaw was found in the Ansible Engine when using module_args
5.5
Moyenne
CVE-2020-14330
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…
5.0
Moyenne
CVE-2020-10744
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…
5.0
Moyenne
CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…
5.0
Moyenne