PT-2019-5284

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...

ansible: Incomplete fix for CVE-2019-10206

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...