NetSight
IP …
low3.9

CVE-2020-1739

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is use…

Impact

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.

Affected products

VendorProductAffected versions
RedhatAnsible
through 2.7.16
from 2.8.0 through 2.8.8
from 2.9.0 through 2.9.5
RedhatAnsible Tower
through 3.3.4
from 3.4.0 through 3.4.5
from 3.5.0 through 3.5.5
from 3.6.0 through 3.6.3
RedhatCloudforms Management Engine
Version 5.0
RedhatOpenstack
Version 13
FedoraprojectFedora
Versions 30, 31, 32
DebianDebian Linux
Versions 8.0, 10.0

Weakness classification

CWE-200

References