Mageia: Security Advisory (MGASA-2021-0132)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0131)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-20228 affecting package ansible 2.9.18-1

CVE-2021-20228 affecting package ansible 2.9.18-1. An upgraded version of the package is available that resolves this issue...

SUSE-SU-2021:2121-1 Security update for ansible

This update for ansible fixes the following issues: - Update to 2.9.22: - CVE-2021-3447: multiple modules expose secured values bsc1183684 - CVE-2021-20228: basic.py nolog with fallback option bsc1181935 - CVE-2021-20191: multiple collections exposes secured values bsc1181119 - CVE-2021-20180:...

RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.6] (Moderate) (RHSA-2021:2180)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2180 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

Security Bulletin: Ansible vulnerability affects IBM Elastic Storage System (CVE-2021-20228)

Summary Ansible, which is used in IBM Elastic Storage System could allow a local authenticated attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2021-20228 DESCRIPTION: Ansible Engine could allow a local authenticated attacker to obtain sensitive information, caused by...

AZL-6304 CVE-2021-20228 affecting package ansible for versions less than 2.12.1-1

A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the nolog feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability...

CVE-2021-20228

CVE-2021-20228 affects Ansible Engine 2.9.18 where sensitive info is not masked by default and not protected by no_log when using the basic.py sub-option, impacting confidentiality. Multiple connected advisories confirm the issue and note updates/patches: IBM ESS (fix to 6.0.2.1), Debian security...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform Operator 1.2 security update

Red Hat Ansible Automation Platform Resource Operator 1.2 technical preview images that fix several security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Fedora: Security Advisory for ansible (FEDORA-2021-e9478617ae)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ansible (FEDORA-2021-9a0903469c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0664)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0664 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0663)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0663 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...

CVE-2019-20228

...

CVE-2018-20228

Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF...

CVE-2018-20228

Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF...

CVE-2018-20228

CVE-2018-20228 concerns Subsonic V6.1.5 where an issue in internetRadioSettings.view streamUrl enables CSRF, enabling Server-Side Request Forgery (SSRF). Public description confirms the vulnerability affecting Subsonic 6.1.5 and identifies CSRF and SSRF as the outcomes. NVD data lists CVSS scores...