GHSA-785X-QW4V-6872 Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible

🗓️ 09 Feb 2022 22:00:08Reported by GoogleType

osv

osv🔗 osv.dev👁 29 Views

Improper handling of sensitive data in Ansible uri modul

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DSA-4950-1 : ansible - security update	7 Aug 202100:00	–	nessus
Tenable Nessus	Fedora 31 : ansible (2020-1e6eeadbb4)	20 Aug 202000:00	–	nessus
Tenable Nessus	Fedora 32 : ansible (2020-d5e74bf9a0)	9 Sep 202000:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : ansible (openSUSE-SU-2022:0081-1)	17 Mar 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.8.15) (Important) (RHSA-2020:3600)	1 Sep 202000:00	–	nessus
Tenable Nessus	SUSE SLES15: POS_Image-Graphical7 / POS_Image-JeOS7 / ansible / ansible-doc / etc (SUSE-SU-2024:1509-1)	7 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-14330	4 Mar 202500:00	–	nessus
Amazon	Medium: ansible	25 Sep 202300:00	–	amazon

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14330
github	www.github.com/ansible/ansible/issues/68400
github	www.github.com/ansible/ansible/pull/69653
github	www.github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-785x-qw4v-6872
github	www.github.com/ansible/ansible
github	www.github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml
debian	www.debian.org/security/2021/dsa-4950

05 Sep 2024 01:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

CVSS 46.8

EPSS0.00568

improper output neutralization improper encoding logs ansible data confidentiality