Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.31 views

Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)

The version of ansible installed on the remote host is prior to 2.9.12-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ANSIBLE2-2023-006 advisory. An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive da...

5.5CVSS7AI score0.00243EPSS
Exploits2References8
Github Security Blog
Github Security Blog
added 2022/02/09 9:59 p.m.22 views

Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS3.9AI score0.00243EPSS
Exploits0References12Affected Software1
NVD
NVD
added 2020/09/11 6:15 p.m.16 views

CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS0.00243EPSS
Exploits0References3
OSV
OSV
added 2020/09/11 6:15 p.m.20 views

CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS5.1AI score0.00243EPSS
Exploits0References3
Prion
Prion
added 2020/09/11 6:15 p.m.18 views

Security feature bypass

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

2.1CVSS5.2AI score0.00243EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2020/09/11 6:15 p.m.36 views

PYSEC-2020-4

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS5.1AI score0.00243EPSS
Exploits0References3
CVE
CVE
added 2020/09/11 5:59 p.m.174 views

CVE-2020-14332

The CVE-2020-14332 issue affects the Ansible Engine (module_args) where tasks run in check mode may reveal sensitive data from event data, impacting confidentiality. Exploitation details are not provided in the documents. Remediation guidance across connected sources indicates applying vendor sec...

5.5CVSS5.1AI score0.00243EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/11 5:59 p.m.17 views

CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS5.7AI score0.00243EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2020/09/11 5:59 p.m.33 views

CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

5.5CVSS5.4AI score0.00243EPSS
Exploits0
Mageia
Mageia
added 2020/09/05 9:34 a.m.44 views

Updated ansible package fixes security vulnerabilities

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri...

9.6CVSS1.5AI score0.00181EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2020/07/16 7:37 p.m.38 views

CVE-2020-14332

A flaw was found in the Ansible Engine when using moduleargs. Tasks executed with check mode --check-mode do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality...

2.1CVSS5.1AI score0.00243EPSS
Exploits0References4
Rows per page
Query Builder