tocsin

PyPI/ansible CVE-2019-14864: unknown, EPSS 1.86%

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used

Action: Upgrade ansible to 2.7.15 or later.

pip install ansible==2.7.15
pip install ansible==2.8.7
pip install ansible==2.9.1

Affected

introducedfixedlast affected
2.7.02.7.15-
2.8.02.8.7-
2.9.02.9.1-

Fixed versions

2.7.152.8.72.9.1

Sources

CVE-2019-14864 · published · modified · JSON