The vulnerability of the Ansible configuration management system, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

Ansible configuration management lacks input validation, enabling remote access to protected data.

Reporter	Title	Published	Views	Family All 74
AlpineLinux	CVE-2019-14856	26 Nov 201913:01	–	alpinelinux
CNVD	An unspecified vulnerability exists in Ansible (CNVD-2019-37725)	21 Oct 201900:00	–	cnvd
CVE	CVE-2019-14856	26 Nov 201913:01	–	cve
Cvelist	CVE-2019-14856	26 Nov 201913:01	–	cvelist
Debian CVE	CVE-2019-14856	26 Nov 201913:01	–	debiancve
EUVD	EUVD-2019-0004	7 Oct 202500:30	–	euvd
Github Security Blog	Ansible password prompts could expose passwords	24 May 202217:02	–	github
NVD	CVE-2019-14856	26 Nov 201914:15	–	nvd
Tenable Nessus	openSUSE Security Update : ansible (openSUSE-2020-513)	14 Apr 202000:00	–	nessus
Tenable Nessus	Photon OS 2.0: Ansible PHSA-2020-2.0-0226	10 Apr 202000:00	–	nessus

Vulners

Node

red_hat ansibleRange2.6.0–2.6.20

red_hat ansibleRange2.7.0–2.7.14

red_hat ansibleRange2.8.0–2.8.6

Source	Link
access	www.access.redhat.com/security/cve/CVE-2019-14856
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-14856
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2019-14856/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti

16 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 26.8

EPSS0.01649