ansible (>=6.0.0 <=6.7.0), ansible-doctor (>=3.1.2 <=3.1.3) +26 more potentially affected by CVE-2024-0690 via ansible-core (>=2.11.0 <=2.14.11)

ansible-core PYPI version =2.11.0, =6.0.0, =3.1.2, =1.1.2, =1.0.2, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.2.0, =0.1.0, =4.9.0.0, =6.7.0.4 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

amscrot-py (>=1.0.0 <=1.1.0), ansible (>=9.0.0a1 <=9.13.0) +18 more potentially affected by CVE-2024-0690 via ansible-core (>=2.16.0 <=2.16.2)

ansible-core PYPI version =2.16.0, =1.0.0, =9.0.0a1, =0.1.4, =1.5.65, =1.1.2, =1.3.2, =1.8.0, =16.0.0, =23.0.0, =1.0.0, =0.1.3, =0.1.2, =0.1.4 - shellmarks =3.0.0 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

agsekit (>=0.0.1 <=1.7.1), ansible (>=8.0.0 <=8.7.0) +19 more potentially affected by CVE-2024-0690 via ansible-core (>=2.15.0 <=2.15.6)

ansible-core PYPI version =2.15.0, =0.0.1, =8.0.0, =2.1.0, =1.1.7, =1.5.28, =0.0.6, =0.1.0, =3.7.4, =0.1.0, =15.0.0, =0.2.0, =0.1.0, =0.1.6 and more Source cves: CVE-2024-0690 Source advisory: OSV:GHSA-H24R-M9QC-PVPG...

CVE-2024-0690

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as...

ansible (>=6.0.0 <=7.7.0), ansible-doctor (>=3.1.2 <=3.1.3) +35 more potentially affected by CVE-2024-0690 via ansible-core (>=2.11.0 <=2.14.3)

ansible-core PYPI version =2.11.0, =6.0.0, =3.1.2, =1.1.2, =1.0.2, =1.0.4.1233rc0, =6.0.0, =8.0.0, =1.0.0, =1.4.1, =0.0.1, =0.2.0, =0.4.0 and more Source cves: CVE-2024-0690 Source advisory: OSV:PYSEC-2024-36...

amscrot-py (>=1.0.0 <=1.1.0), ansible (>=9.0.0a1 <=9.13.0) +18 more potentially affected by CVE-2024-0690 via ansible-core (>=2.16.0 <=2.16.2)

ansible-core PYPI version =2.16.0, =1.0.0, =9.0.0a1, =0.1.4, =1.5.65, =1.1.2, =1.3.2, =1.8.0, =16.0.0, =23.0.0, =1.0.0, =0.1.3, =0.1.2, =0.1.4 - shellmarks =3.0.0 and more Source cves: CVE-2024-0690 Source advisory: OSV:PYSEC-2024-36...

CVE-2024-0690

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as...

CVE-2024-0690

CVE-2024-0690 affects ansible-core and describes an information disclosure where output can leak sensitive data when ANSIBLE_NO_LOG is ignored in certain tasks (e.g., loop items). The vulnerability is evidenced across multiple sources in the connected set, including Red Hat/Debian/AlmaLinux advis...

CVE-2024-0690 Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as...

CVE-2024-0690 Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as...

CVE-2024-0690

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as...

Medium: ansible-core

Issue Overview: The upstream report describes this issue as follows: When installing a maliciously created Ansible role using 'ansible-galaxy role install', arbitrary files the user has access to can be overwritten. The malicious role must contain a symlink with an absolute path to the target fil...

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2024-505)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-505 advisory. The upstream report describes this issue as follows: When installing a maliciously created Ansible role using 'ansible-galaxy role install', arbitrary files the user has access to can be...

Fedora 39 : ansible-core (2024-0d894565a0)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0d894565a0 advisory. Mitigate CVE-2024-0690 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora: Security Advisory for ansible-core (FEDORA-2024-cfa5a5cbac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : ansible-core (2024-cfa5a5cbac)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cfa5a5cbac advisory. Mitigate CVE-2024-0690 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 5 : ELSA-2012-0690-1: / kernel (ELSA-2012-06901)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-06901 advisory. - The sockallocsendpskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local user...

CVE-2023-0690 Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

CVE-2023-0690 Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

CVE-2023-0690

HashiCorp Boundary is affected from 0.10.0 through 0.11.2 when using a PKI-based worker with a KMS defined in the config. New credentials created after automatic rotation may not have been encrypted by the intended KMS, resulting in plaintext on the Boundary PKI worker’s disk. The issue is fixed ...