tocsin

PyPI/ansible CVE-2018-16859: unknown, EPSS 0.54%

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user wi

Action: Upgrade ansible to 2.5.13 or later.

pip install ansible==2.7.4
pip install ansible==2.8.1
pip install ansible==2.5.13
pip install ansible==2.6.10

Affected

introducedfixedlast affected
02.5.13-
2.6.02.6.10-
2.7.02.7.4-
2.7.52.8.1-

Fixed versions

2.7.42.8.12.5.132.6.10

Sources

CVE-2018-16859 · published · modified · JSON