tocsin

PyPI/ansible CVE-2018-10855: unknown, EPSS 3.09%

Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged,

Action: Upgrade ansible to 2.4.5.0 or later.

pip install ansible==2.5.5
pip install ansible==2.4.5.0

Affected

introducedfixedlast affected
2.42.4.5.0-
2.52.5.5-

Fixed versions

2.5.52.4.5.0

Sources

CVE-2018-10855 · published · modified · JSON