Lucene search
+L

232 matches found

Mageia
Mageia
added 2019/03/21 4:36 p.m.47 views

Updated ansible packages fix security vulnerability

The user module leaked parameters passed to ssh-keygen to the process environment CVE-2018-16837. The fetch module was susceptible to path traversal CVE-2019-3828...

4.2CVSS2.9AI score0.00526EPSS
SaveExploits0References2
zdt
zdt
added 2019/03/19 12:0 a.m.45 views

eNdonesia Portal 8.7 - Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================================================================== Exploit Title: eNdonesia Portal 'banners.php' SQL Inj. Dork: N/A Date: 19-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

0.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/03/18 12:56 p.m.7 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/03/14 1:34 p.m.7 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.25 views

The vulnerability of the “User” module in the Ansible configuration management system, related to the disclosure of data transmitted as parameters to the ssh-keygen utility, allows a hacker to gain unauthorized access to user-sensitive information.

The vulnerability of the “User” module in the Ansible configuration management system is related to the exposure of data transmitted as parameters to the ssh-keygen utility. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to user-sensitive information through a...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2019/02/26 12:0 a.m.57 views

Ansible User Module Information Disclosure Vulnerability

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage, and organize computer systems.User module is one of the user modules. An information disclosure vulnerability exists in the User module in Ansible. The vulnerability can be exploited by an...

7.8CVSS6.3AI score0.00357EPSS
SaveExploits0References1
Debian
Debian
added 2019/02/19 9:54 p.m.249 views

[SECURITY] [DSA 4396-1] ansible security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4396-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2019 https://www.debian.org/security/faq -...

7.8CVSS7.3AI score0.03113EPSS
SaveExploits0
Veracode
Veracode
added 2019/01/15 9:26 a.m.32 views

Information Disclosure

ansible is vulnerable to information disclosure. The vulnerability exists in the user module when it passes the sshkeypassphrase value to the ssh-keygen executable as a parameter, allowing any user with access to the process list to retrieve the passphrase in cleartext...

7.8CVSS7.1AI score0.00357EPSS
SaveExploits0References15Affected Software14
RedHat Linux
RedHat Linux
added 2018/11/05 10:55 a.m.7 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2018/11/05 10:55 a.m.549 views

Moderate: Red Hat Security Advisory: [ansible] security update

An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.8CVSS7.3AI score0.00357EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/11/05 10:55 a.m.11 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2018/11/05 10:55 a.m.8 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2018/11/05 10:55 a.m.542 views

Moderate: Red Hat Security Advisory: [ansible] security and bug fix update

An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.8CVSS7.3AI score0.00357EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/11/05 10:54 a.m.2 views

Ansible: Information leak in "user" module

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

7.8CVSS7.2AI score0.00357EPSS
SaveExploits0References5
OSV
OSV
added 2018/10/23 3:29 p.m.3 views

ALPINE-CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS6.8AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/23 3:29 p.m.28 views

PYSEC-2018-44

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS3AI score0.00357EPSS
SaveExploits0References15
PyPA
PyPA
added 2018/10/23 3:29 p.m.8 views

PYSEC-2018-44

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS6.8AI score0.00357EPSS
SaveExploits0References15Affected Software1
OSV
OSV
added 2018/10/23 3:29 p.m.31 views

CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS7.5AI score
SaveExploits0References14
NVD
NVD
added 2018/10/23 3:29 p.m.16 views

CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS6.2AI score0.00357EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2018/10/23 3:0 p.m.46 views

CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

7.8CVSS5.6AI score0.00357EPSS
SaveExploits0References13
Rows per page
Query Builder