Information Disclosure

2019-01-1509:19:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.008 Low

EPSS

Percentile

81.3%

JSON

ansible is vulnerable to information disclosure. The library contains a configuration example for passing Jenkins credentials as parameters. These parameters are logged, allowing a malicious user with access to the logs to have access to view the Jenkins credentials.

CPENameOperatorVersion
ansibleeq2.3.1.0__3.el7
ansibleeq2.3.2.0__1.el7
ansibleeq2.2.0.0__1.el7
ansibleeq1.9.3__2.el7aos
ansibleeq2.3.0.0__3.el7
ansibleeq2.2.0__0.50.prerelease.el7
ansibleeq1.9.4__1.el7aos
ansibleeq2.3.0.0__4.el7
ansibleeq2.3.0.0__1.el7
ansibleeq2.2.1.0__2.el7

Name	Operator	Version
ansible	eq	2.3.1.0__3.el7
ansible	eq	2.3.2.0__1.el7
ansible	eq	2.2.0.0__1.el7
ansible	eq	1.9.3__2.el7aos
ansible	eq	2.3.0.0__3.el7
ansible	eq	2.2.0__0.50.prerelease.el7
ansible	eq	1.9.4__1.el7aos
ansible	eq	2.3.0.0__4.el7
ansible	eq	2.3.0.0__1.el7
ansible	eq	2.2.1.0__2.el7