Lucene search
+L

69 matches found

OSV
OSV
•added 2020/01/02 3:15 p.m.•18 views

DEBIAN-CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.7AI score0.01873EPSS
SaveExploits1References1
OSV
OSV
•added 2020/01/02 3:15 p.m.•10 views

ALPINE-CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.8AI score0.01873EPSS
SaveExploits1References1
OSV
OSV
•added 2020/01/02 3:15 p.m.•31 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.4AI score
SaveExploits0References6
PyPA
PyPA
•added 2020/01/02 3:15 p.m.•15 views

PYSEC-2020-160

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.8AI score0.01873EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2020/01/02 3:15 p.m.•13 views

PYSEC-2020-160

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.9AI score0.01873EPSS
SaveExploits1References6
Prion
Prion
•added 2020/01/02 3:15 p.m.•31 views

Design/Logic Flaw

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

4CVSS6.4AI score0.01873EPSS
SaveExploits1References6Affected Software8
OSV
OSV
•added 2020/01/02 3:15 p.m.•17 views

PYSEC-2020-179

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

7.1AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/01/02 3:15 p.m.•28 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.8AI score0.01873EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2020/01/02 2:23 p.m.•23 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.7AI score0.01873EPSS
SaveExploits1
Mend
Mend
•added 2020/01/02 2:23 p.m.•2 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.9CVSS0.01873EPSS
SaveExploits1References17
CVE
CVE
•added 2020/01/02 2:23 p.m.•329 views

CVE-2019-14864

The connected documents confirm CVE-2019-14864 affects Ansible, specifically versions 2.9.x before 2.9.1, 2.8.x before 2.8.7, and 2.7.x before 2.7.15. The root cause is that the no_log flag is not respected when Sumologic and Splunk callback plugins are used to send task results to collectors, le...

6.5CVSS6.4AI score0.01873EPSS
SaveExploits1References6Affected Software4
Cvelist
Cvelist
•added 2020/01/02 2:23 p.m.•45 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

5.7CVSS6.6AI score0.01873EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2020/01/02 2:23 p.m.•85 views

CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.7AI score0.01873EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/02 12:00 a.m.•5 views

CVE-2019-14864: Improper Output Neutralization for Logs

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

6.5CVSS6.5AI score0.01873EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2019/12/20 12:00 a.m.•70 views

Ansible Tower 3.5.x < 3.5.4 / 3.6.x < 3.6.2 Multiple Vulnerabilities

The version of Ansible Tower running on the remote web server is 3.5.x prior to 3.5.4 or 3.6.x prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities. - An information disclosure vulnerability exists in the Sumologic and Splunk callback plugins due to Ansible not respecting the...

8.2CVSS6.7AI score0.01873EPSS
SaveExploits1References10
OSV
OSV
•added 2019/12/06 2:15 p.m.•17 views

MGASA-2019-0358 Updated ansible packages fix security vulnerability

Updated ansible package fixes security vulnerability: Splunk and Sumologic callback plugins leak sensitive data in logs CVE-2019-14864...

6.5CVSS6.6AI score0.01873EPSS
SaveExploits1References4
Mageia
Mageia
•added 2019/12/06 2:15 p.m.•52 views

Updated ansible packages fix security vulnerability

Updated ansible package fixes security vulnerability: Splunk and Sumologic callback plugins leak sensitive data in logs CVE-2019-14864...

6.5CVSS3AI score0.01873EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/12/06 12:00 a.m.•41 views

PT-2020-3040

Name of the Vulnerable Software and Affected Versions Ansible versions 2.7.x through 2.7.14 Ansible versions 2.8.x through 2.8.6 Ansible versions 2.9.x through 2.9.0 Description The issue is related to the absence of consideration for the no log flag in Ansible's system management configuration...

6.8CVSS7.6AI score0.01873EPSS
SaveExploits1References179
Tenable Nessus
Tenable Nessus
•added 2019/11/22 12:00 a.m.•46 views

RHEL 7 : ansible (RHSA-2019:3925)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3925 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

6.5CVSS7.2AI score0.01873EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2019/11/22 12:00 a.m.•45 views

RHEL 7 / 8 : ansible (RHSA-2019:3927)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3927 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and do...

6.5CVSS7.2AI score0.01873EPSS
SaveExploits1References5
Rows per page
Query Builder