CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...

CVE-2018-16837

CVE-2018-16837 affects Ansible; the User module leaks data passed to ssh-keygen, enabling potential exposure of credentials (e.g., passphrases) visible in a process list for users with access. The connected documents confirm this information disclosure issue and note multiple vendor advisories/pa...

PT-2018-2517

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description The issue is related to the Ansible "User" module, which leaks data passed as parameters to ssh-keygen. This could lead to undesirable situations where sensitive information, such as...

Ansible Arbitrary Command Execution Vulnerability (CNVD-2017-10546)

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage and orchestrate computer systems. An arbitrary command execution vulnerability exists in the user module in versions of Ansible prior to 1.6.6. A remote attacker can exploit this vulnerabilit...

Command injection

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

PYSEC-2017-2

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

PYSEC-2017-2

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

UBUNTU-CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

DEBIAN-CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

PT-2018-5044 · Red Hat +1 · Ansible +1

Name of the Vulnerable Software and Affected Versions: Ansible versions prior to 2.2.1.0 Description: An input validation issue was discovered in the mysql user module, potentially causing password changes to fail under certain conditions, resulting in the previous password remaining active...

Blackboard LMS 9.1 SP14 - Cross-Site Scripting

Document Title: =============== Blackboard LMS 9.1 SP14 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1900 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ====================================...

Drupal 'User' Module Privilege Escalation Vulnerability - Linux

Drupal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

Drupal 'User' Module Privilege Escalation Vulnerability - Windows

Drupal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

CVE-2016-6211

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...

Code injection

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...

CVE-2016-6211

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form...