Most recent entries from all

bdu:2024-06980

BREW-ansible-CVE-2021-20191

Affected: Homebrew: ansible

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.

CLEANSTART-2026-XW66953 — flaw was found in ansible

Affected: CleanStart: ansible

Security vulnerability affects the ansible package. A flaw was found in ansible.

cnvd-2021-19700

EUVD-2026-21509

fkie_cve-2021-20191

GHSA-8f4m-hccc-8qph — Insertion of Sensitive Information into Log File in ansible

Affected: PyPI: ansible

gsd-2021-20191

msrc_CVE-2021-20191 — A flaw was found in ansible. Credentials such as secrets are being disclosed in console log by default and not protecte…

msrc_CVE-2021-20191

OESA-2021-1349 — ansible security update

Affected: openEuler:20.03-LTS-SP2: ansible

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.(CVE-2020-1739) A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.(CVE-2020-1740) A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the…

openSUSE-SU-2022:0081-1 — Security update for ansible

Security update for ansible

PYSEC-2021-124

Affected: PyPI: ansible

RHSA-2021:0663 — Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

ansible: user data leak in snmp_facts module module: bitbucket_pipeline_variable exposes secured values ansible: multiple modules expose secured values ansible: basic.py no_log with fallback option

SUSE-SU-2021:2121-1 — Security update for ansible

Security update for ansible

UBUNTU-CVE-2021-20191

Affected: Ubuntu:Pro:14.04:LTS: ansible, Ubuntu:Pro:16.04:LTS: ansible, Ubuntu:Pro:18.04:LTS: ansible, Ubuntu:Pro:20.04:LTS: ansible, Ubuntu:Pro:22.04:LTS: ansible, Ubuntu:24.04:LTS: ansible, Ubuntu:25.10: ansible, Ubuntu:26.04:LTS: ansible

WID-SEC-W-2022-1350 — Ansible: Schwachstelle ermöglicht Offenlegung von Informationen

Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um Informationen offenzulegen.