Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-0018

Malware in sbrugna...

4.9CVSS6.8AI score0.00184EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-8647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances...

4.9CVSS7.1AI score0.00184EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2017-0164)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.04313EPSS
Exploits1References7
Veracode
Veracode
added 2019/01/15 9:18 a.m.22 views

Passwords Fail To Change

ansible doesn't always succeed in changing a user's password. The mysqluser module has a flaw which means that the user's passwords sometimes fails to change without telling the user. This means that old passwords may still be active when it should have been modified...

4.9CVSS6AI score0.00184EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2018/10/10 5:23 p.m.25 views

GHSA-X4CM-M36H-C6QJ Improper Input Validation in ansible

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

6.9CVSS6.3AI score0.00184EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2018/10/10 5:23 p.m.25 views

Improper Input Validation in ansible

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS2.8AI score0.00184EPSS
Exploits0References9Affected Software1
CNVD
CNVD
added 2018/07/31 12:0 a.m.2 views

Ansible mysql_user module input validation vulnerability

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage, and orchestrate computer systems.Mysqluser module is one of the MySQL user management modules. An input validation vulnerability exists in Ansible's mysqluser module prior to version 2.2.1.0...

4.9CVSS7AI score0.00184EPSS
Exploits0References1
OSV
OSV
added 2018/07/26 2:29 p.m.21 views

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS3.8AI score0.00184EPSS
Exploits0References3
NVD
NVD
added 2018/07/26 2:29 p.m.12 views

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS4.6AI score0.00184EPSS
Exploits0References3
OSV
OSV
added 2018/07/26 2:29 p.m.26 views

PYSEC-2018-58

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS2.6AI score0.00184EPSS
Exploits0References4
Prion
Prion
added 2018/07/26 2:29 p.m.17 views

Input validation

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4CVSS7AI score0.00184EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2018/07/26 2:29 p.m.21 views

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS6.7AI score0.00184EPSS
Exploits0References2
PyPA
PyPA
added 2018/07/26 2:29 p.m.7 views

PYSEC-2018-58

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS6.9AI score0.00184EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2018/07/26 2:29 p.m.2 views

DEBIAN-CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS8.6AI score0.00184EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/07/26 2:0 p.m.22 views

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

2.2CVSS6.4AI score0.00184EPSS
Exploits0References3
CVE
CVE
added 2018/07/26 2:0 p.m.94 views

CVE-2016-8647

CVE-2016-8647 affects Ansible’s mysql_user module before 2.2.1.0. The issue is an input validation vulnerability that may fail to correctly change a password, leaving the previous password active. The provided documents do not specify exploit details, affected versions beyond the stated pre-2.2.1...

4.9CVSS5.8AI score0.00184EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/07/26 2:0 p.m.30 views

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

4.9CVSS6.7AI score0.00184EPSS
Exploits0
Mageia
Mageia
added 2017/06/10 7:1 a.m.34 views

Updated ansible packages fix security vulnerability

It was found that aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key CVE-2016-8614. It is reported that in Ansible, under some circumstances the mysqluser module...

9.8CVSS2.8AI score0.04313EPSS
Exploits1References5
Veracode
Veracode
added 2017/05/18 3:13 a.m.22 views

Passwords Fail To Change

ansible doesn't always succeed in changing a user's password. The mysqluser module has a flaw which means that the user's passwords sometimes fails to change without telling the user. This means that old passwords may still be active when it should have been modified...

4.9CVSS6.5AI score0.00184EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder