Lucene search
+L

28 matches found

UbuntuCve
UbuntuCve
•added 2020/09/11 6:15 p.m.•43 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.7AI score0.00573EPSS
SaveExploits1References4
OSV
OSV
•added 2020/09/11 6:15 p.m.•12 views

UBUNTU-CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.7AI score0.00573EPSS
SaveExploits1References5
Prion
Prion
•added 2020/09/11 6:15 p.m.•29 views

Input validation

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

2.1CVSS5.4AI score0.00573EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2020/09/11 6:15 p.m.•45 views

PYSEC-2020-3

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS2.8AI score0.00573EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/11 12:00 a.m.•2 views

CVE-2020-14330: Insertion of Sensitive Information into Log File

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS8AI score0.00573EPSS
SaveExploits1References3
CVE
CVE
•added 2020/09/11 12:00 a.m.•198 views

CVE-2020-14330

CVE-2020-14330 (Ansible) is an Improper Output Neutralization for Logs flaw in the uri module that can expose sensitive data in logs/output, including keys from playbooks, affecting confidentiality. The vulnerability affects Ansible Engine/uri usage with local access; no exploit details are provi...

5.5CVSS5.3AI score0.00573EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2020/09/11 12:00 a.m.•83 views

CVE-2020-14330

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS6.9AI score0.00573EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2020/09/01 7:32 p.m.•12 views

Ansible: masked keys for uri module are exposed into content and json output

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

5.5CVSS7.1AI score0.00573EPSS
SaveExploits1References5
Rows per page
Query Builder