Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

🗓️ 07 Apr 2021 20:33:26Reported by GitHub Advisory DatabaseType

Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansibl

Reporter	Title	Published	Views	Family All 95
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-008)	27 Sep 202300:00	–	nessus
Tenable Nessus	Ansible Tower 3.4.x =< 3.4.5 / 3.5.x =< 3.5.5 / 3.6.x =< 3.6.3 'k8s module' Information Disclosure Vulnerability	20 May 202000:00	–	nessus
Tenable Nessus	Debian DSA-4950-1 : ansible - security update	7 Aug 202100:00	–	nessus
Tenable Nessus	Fedora 30 : ansible (2020-1b6ce91e37)	27 Apr 202000:00	–	nessus
Tenable Nessus	Fedora 31 : ansible (2020-f80154b5b4)	27 Apr 202000:00	–	nessus
Tenable Nessus	GLSA-202006-11 : Ansible: Multiple vulnerabilities	17 Jun 202000:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : ansible (openSUSE-SU-2022:0081-1)	17 Mar 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.7) (Important) (RHSA-2020:1541)	22 Apr 202000:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.7) (Important) (RHSA-2020:1542)	22 Apr 202000:00	–	nessus
Tenable Nessus	RHEL 7 : Ansible security update (2.7.18) (Moderate) (RHSA-2020:2142)	13 May 202000:00	–	nessus

Vulners

Node

ansible ansibleRange2.9.0a1–2.9.7pip

ansible ansibleRange2.8.0a1–2.8.12pip

ansible ansibleRange2.7.0a1–2.7.18pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1753
github	www.github.com/ansible-collections/kubernetes/pull/51
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/202006-11
debian	www.debian.org/security/2021/dsa-4950
github	www.github.com/ansible/ansible/pull/68195
github	www.github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380
github	www.github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a
github	www.github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6
github	www.github.com/advisories/GHSA-86hp-cj9j-33vv

09 Sep 2024 21:23Current

6.1Medium risk

Vulners AI Score6.1

CVSS 22.1

CVSS 3.15 - 5.5

EPSS0.00051