NetSight
IP …
medium5.3

CVE-2018-16876

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible d…

Impact

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.

Affected products

VendorProductAffected versions
RedhatAnsible
from 2.5.0 before 2.5.14
from 2.6.0 before 2.6.11
from 2.7.0 before 2.7.5
DebianDebian Linux
Version 9.0
RedhatAnsible Engine
Versions 2.0, 2.5, 2.6, 2.7
RedhatOpenstack
Version 14
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
SusePackage Hub
All versions
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04

Weakness classification

CWE-200

References