5.0
Moyenne
CVE-2020-14330 An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…
Description
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible | 2.10.0 | Pas de correctif indiqué |
Références
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
- DSA-4950 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ansible
Les 29 CVE de Ansible →
CVE-2020-14332
A flaw was found in the Ansible Engine when using module_args
5.5
Moyenne
CVE-2020-10744
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…
5.0
Moyenne
CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…
5.0
Moyenne
CVE-2020-10685
A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…
5.0
Moyenne