PyPI/ansible CVE-2019-10217: medium 6.5, EPSS 1.87%

Exposure of Sensitive Information to an Unauthorized Actor in ansible

Action: Upgrade ansible to 2.8.4 or later.

pip install ansible==2.8.4

Affected

Fixed versions

Sources

• osv: GHSA-p75j-wc34-527c
• https://nvd.nist.gov/vuln/detail/CVE-2019-10217
• https://github.com/ansible/ansible/issues/56269
• https://github.com/ansible/ansible/pull/59427
• https://github.com/ansible/ansible/commit/c1ee1f142db1e669b710a65147ea32be47a91519
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217
• https://github.com/advisories/GHSA-p75j-wc34-527c
• https://github.com/ansible/ansible
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-3.yaml
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html

CVE-2019-10217 · published 2021-10-12T16:31:59Z · modified 2024-11-25T05:39:33.038200Z · JSON