CVE-2020-14330

🗓️ 14 Jul 2020 18:50:50Reported by redhat.comType

An Improper Output Neutralization for Logs flaw in Ansible exposes sensitive data through the uri module, allowing unauthorized access to task logs and playbook keys

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DSA-4950-1 : ansible - security update	7 Aug 202100:00	–	nessus
Tenable Nessus	Fedora 31 : ansible (2020-1e6eeadbb4)	20 Aug 202000:00	–	nessus
Tenable Nessus	Fedora 32 : ansible (2020-d5e74bf9a0)	9 Sep 202000:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : ansible (openSUSE-SU-2022:0081-1)	17 Mar 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.8.15) (Important) (RHSA-2020:3600)	1 Sep 202000:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2024:1509-1)	7 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-14330	4 Mar 202500:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14330
github	www.github.com/ansible/ansible/issues/68400
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

19 Apr 2024 23:52Current

2.6Low risk

Vulners AI Score2.6

CVSS 22.1

CVSS 3.15 - 5.5

EPSS0.00568