PYSEC-2019-3

A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by nolog feature. Some of these fields in GCP modules are not set properly. serviceaccountcontents which is common class for all gcp modules is not setting nolog to True. Any sensitive data manage...

Ansible: gcp modules do not flag sensitive data fields properly

A flaw was found in the gcp module of ansible. Certain fields managing sensitive data should be marked by the nolog feature. The serviceaccountcontents, which is common class for all gcp modules, is not being set as nolog to True. Any sensitive data managed by that function would be leaked as an...