Red Hat Inc Ansible vulnerabilities

1 known vulnerability affecting red_hat_inc/ansible.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2017-7550CRITICALCVSS 9.8v2.3.x before 2.3.3, 2.4.x before 2.4.12017-11-21

CVE-2017-7550 [CRITICAL] CWE-532 CVE-2017-7550: A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain para A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module