Ansible sensitive information disclosure
Moderate severity
GitHub Reviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Sep 10, 2024
Package
Affected versions
< 2.5.14
>= 2.6.0a1, < 2.6.11
>= 2.7.0a1, < 2.7.5
Patched versions
2.5.14
2.6.11
2.7.5
Description
Published by the National Vulnerability Database
Jan 3, 2019
Published to the GitHub Advisory Database
May 13, 2022
Reviewed
Apr 22, 2024
Last updated
Sep 10, 2024
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in
vvv+mode with no_log on that can lead to leakage of sensible data.References