ansiblerunnerapi (0.0.2), asset-inventory (0.0.7) +5 more potentially affected by CVE-2021-20180 via ansible (>=2.8.0, <=2.8.18)

ansible PYPI version =2.8.0, =0.1.2.dev20190704124001, =0.5.0, =0.0.4, =0.1.0 - walletlib 0.1.0 Source cves: CVE-2021-20180 Source advisory: GHSA-FH5V-5F35-2RV2...

ansible-roster (0.4.1), ants-client (>=2.0.0b4, <=2.1.0) +7 more potentially affected by CVE-2021-20180 via ansible (>=2.9.0b1, <=2.9.14)

ansible PYPI version =2.9.0b1, =2.0.0b4, =0.1.2, =0.0.6, =0.0.1.dev390, =0.0.1.dev0, =0.0.18, =0.0.21 Source cves: CVE-2021-20180 Source advisory: GHSA-FH5V-5F35-2RV2...

ansible-roster (0.4.1), ants-client (>=2.0.0b4, <=2.1.0) +7 more potentially affected by CVE-2021-20180 via ansible (>=2.9.0b1, <=2.9.14)

ansible PYPI version =2.9.0b1, =2.0.0b4, =0.1.2, =0.0.6, =0.0.1.dev390, =0.0.1.dev0, =0.0.18, =0.0.21 Source cves: CVE-2021-20180 Source advisory: OSV:GHSA-FH5V-5F35-2RV2...

OPENSUSE-SU-2022:0081-1 Security update for ansible

Ansible was updated to 2.9.21 to fix lots of bugs and security issues. Update to version 2.9.20, maintenance release containing numerous bugfixes. Update to version 2.9.19 with minor changes and a few bug fixes. Update to version 2.9.18: CVE-2021-20228 where default and fallback values for nolog...

CVE-2021-20180

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

ansible-roster (0.4.1), ants-client (>=2.0.0b4, <=2.1.0) +7 more potentially affected by CVE-2021-20180 via ansible (>=2.9.0b1, <=2.9.14)

ansible PYPI version =2.9.0b1, =2.0.0b4, =0.1.2, =0.0.6, =0.0.1.dev390, =0.0.1.dev0, =0.0.18, =0.0.21 Source cves: CVE-2021-20180 Source advisory: MEND:CVE-2021-20180...

CVE-2021-20180

CVE-2021-20180 is an Ansible local-authenticated vulnerability where credentials are disclosed in the console log when using the bitbucket_pipeline_variable module, enabling an attacker to steal bitbucket_pipeline credentials and impacting confidentiality. CVSS: v3.1 base 5.5 (local, low complexi...

Security update for ansible (important)

openSUSE Security Update: Security update for ansible Announcement ID: openSUSE-SU-2022:0081-1 Rating: important References: 1099808 1112959 1118896 1126503 1137528 1157968 1157969 1164133 1164134 1164135 1164136 1164137 1164138 1164139 1164140 1165393 1166389 1167440 1167532 1167873 1171162...

Mageia: Security Advisory (MGASA-2021-0132)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:2121-1 Security update for ansible

This update for ansible fixes the following issues: - Update to 2.9.22: - CVE-2021-3447: multiple modules expose secured values bsc1183684 - CVE-2021-20228: basic.py nolog with fallback option bsc1181935 - CVE-2021-20191: multiple collections exposes secured values bsc1181119 - CVE-2021-20180:...

RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.6] (Moderate) (RHSA-2021:2180)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2180 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform Operator 1.2 security update

Red Hat Ansible Automation Platform Resource Operator 1.2 technical preview images that fix several security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Fedora: Security Advisory for ansible (FEDORA-2021-e9478617ae)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ansible (FEDORA-2021-9a0903469c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : ansible (2021-e9478617ae)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e9478617ae advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0663)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0663 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0664)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0664 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

[ASA-202102-9] ansible: information disclosure

Arch Linux Security Advisory ASA-202102-9 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 Package : ansible Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1437 Summary ======= T...

WordPress TablePress Plugin < 1.10 CSV Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112685";...