tocsin

PyPI/ansible CVE-2020-1738: unknown, EPSS 0.40%

A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be sel

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.9
pip install ansible==2.9.6

Affected

introducedfixedlast affected
02.7.17-
2.8.02.8.9-
2.9.02.9.6-

Fixed versions

2.7.172.8.92.9.6

Sources

CVE-2020-1738 · published · modified · JSON