PyPI/ansible CVE-2020-1746: medium 5, EPSS 0.39%
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Action: Upgrade ansible to 2.7.17 or later.
pip install ansible==2.8.11pip install ansible==2.9.7pip install ansible==2.7.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.8.0a1 | 2.8.11 | - |
| 2.9.0a1 | 2.9.7 | - |
| 2.7.0a1 | 2.7.17 | - |
Fixed versions
| 2.8.11 | 2.9.7 | 2.7.17 |
Sources
- osv: GHSA-j2h6-73x8-22c4
- https://nvd.nist.gov/vuln/detail/CVE-2020-1746
- https://github.com/ansible/ansible/pull/67866
- https://github.com/ansible/ansible/commit/d41e38435b1a9e300d8011ac28f16a5add2db119
- https://github.com/ansible/ansible/commit/e6199d768c1c18a4e750ec78d4ded088629baa3f
- https://github.com/ansible/ansible/commit/edd1e1723cc937ec9251adf38c1199a00b0bf6d4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1746
- https://github.com/advisories/GHSA-j2h6-73x8-22c4
- https://github.com/ansible/ansible
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-13.yaml
- https://www.debian.org/security/2021/dsa-4950
CVE-2020-1746 · published · modified · JSON