VMware Tanzu Application Service for VMs Unauthorized Access Vulnerability

VMware Tanzu Application Service for VMs is a suite of application development and deployment solutions from VMware. A security vulnerability exists in VMware Tanzu Application Service for VMs versions 2.6.x prior to 2.6.18, 2.7.x prior to 2.7.11, and 2.8.x prior to 2.8.5. An attacker could explo...

PYSEC-2019-4

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible...