Lucene search
K

6 matches found

OSV
OSV
added 2022/05/14 1:14 a.m.2 views

GHSA-V735-2PP6-H86R Ansible Logs Passwords If PowerShell ScriptBlock is Enabled

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext passwor...

6.7CVSS6.8AI score0.00091EPSS
Exploits0References17
RedhatCVE
RedhatCVE
added 2019/10/10 5:33 a.m.36 views

CVE-2018-16859

Execution of Ansible content on Microsoft's Windows platform with Powershell 5 or higher may disclose sensitive execution details including 'become' passwords, Ansible module arguments, and return values via Powershell's 'suspicious scriptblock logging' feature, which is enabled by default. The...

4.4CVSS3.8AI score0.00091EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2018/12/04 6:27 p.m.1 views

ansible: become password logged in plaintext when used with PowerShell on Windows

Execution of Ansible content on Microsoft's Windows platform with Powershell 5 or higher may disclose sensitive execution details including 'become' passwords, Ansible module arguments, and return values via Powershell's 'suspicious scriptblock logging' feature, which is enabled by default. The...

4.4CVSS7.4AI score0.00091EPSS
Exploits0References5
OSV
OSV
added 2018/11/29 6:29 p.m.0 views

PYSEC-2018-60

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext passwor...

4.4CVSS6.8AI score0.00091EPSS
Exploits0References10
PyPA
PyPA
added 2018/11/29 6:29 p.m.4 views

PYSEC-2018-60

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext passwor...

4.4CVSS6.7AI score0.00091EPSS
Exploits0References10Affected Software1
Positive Technologies
Positive Technologies
added 2018/11/29 12:0 a.m.5 views

PT-2018-13775

Name of the Vulnerable Software and Affected Versions Ansible Engine versions prior to 2.9 Description The issue allows for 'become' passwords to appear in EventLogs in plaintext when executing Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled. ...

6.7CVSS7.2AI score0.00091EPSS
Exploits0References164
Rows per page
Query Builder