ansible-flow (0.1.0), ansible-vault-rekey (1.0.0) +16 more potentially affected by CVE-2018-16837 via ansible (>=1.9.4, <=2.5.7)

ansible PYPI version =1.9.4, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =1.0.0, =1.0.3 - snaps 6.1.0.dev392 - solida 0.9.6 and more Source cves: CVE-2018-16837 Source advisory: GHSA-HWRM-63V2-42G4...

ansible-vault-rekey (1.0.0), ansitom (>=0.0.1, <=0.0.2) +14 more potentially affected by CVE-2018-16837 via ansible (>=2.0.0.0, <=2.5.7)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.1.7, =0.1.14 and more Source cves: CVE-2018-16837 Source advisory: OSV:GHSA-HWRM-63V2-42G4...

CVE-2018-16837

The User module in Ansible leaks any data which is passed on as a parameter to ssh-keygen. This could lead to undesirable situations such as passphrase credentials being passed as a parameter for the ssh-keygen executable, showing those credentials in clear text form for every user which have...

Ubuntu: Security Advisory (USN-4072-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : ansible (openSUSE-2019-1125)

This update for ansible to version 2.7.8 fixes the following issues : Security issues fixed: - CVE-2018-16837: Fixed an information leak in user module bsc1112959. - CVE-2018-16859: Fixed an issue which clould allow logging of password in plaintext in Windows powerShell bsc1116587. - CVE-2019-382...

Updated ansible packages fix security vulnerability

The user module leaked parameters passed to ssh-keygen to the process environment CVE-2018-16837. The fetch module was susceptible to path traversal CVE-2019-3828...

Debian DSA-4396-1 : ansible - security update

Several vulnerabilities have been found in Ansible, a configuration management, deployment, and task execution system : - CVE-2018-10855/ CVE-2018-16876 The nolog task flag wasn't honored, resulting in an information leak. - CVE-2018-10875 ansible.cfg was read from the current working directory. ...

Debian: Security Advisory (DSA-4396-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : [ansible] (RHSA-2018:3462)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3462 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 : [ansible] (RHSA-2018:3460)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3460 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 : [ansible] (RHSA-2018:3463)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3463 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

RHEL 7 : [ansible] (RHSA-2018:3461)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3461 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

Moderate: Red Hat Security Advisory: [ansible] security and bug fix update

An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

Moderate: Red Hat Security Advisory: [ansible] security update

An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

ansible-vault-rekey (1.0.0), ansitom (>=0.0.1, <=0.0.2) +14 more potentially affected by CVE-2018-16837 via ansible (>=2.0.0.0, <=2.5.7)

ansible PYPI version =2.0.0.0, =0.0.1, =0.14.3.0rc1, =0.0.1.dev1287, =4.2.6, =0.4.0, =0.0.11, =2.0.0, =0.1.4, =0.2.0, =0.0.21a21, =0.1.7, =0.1.14 and more Source cves: CVE-2018-16837 Source advisory: OSV:PYSEC-2018-44...

CVE-2018-16837

CVE-2018-16837 affects Ansible; the User module leaks data passed to ssh-keygen, enabling potential exposure of credentials (e.g., passphrases) visible in a process list for users with access. The connected documents confirm this information disclosure issue and note multiple vendor advisories/pa...

CVE-2018-16837

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just t...