tocsin

PyPI/ansible CVE-2021-20191: unknown, EPSS 0.35%

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of

Action: Upgrade ansible to 2.8.19 or later.

pip install ansible==2.8.19
pip install ansible==2.9.18
pip install ansible==2.10.7

Affected

introducedfixedlast affected
02.8.19-
2.9.02.9.18-
2.10.02.10.7-

Fixed versions

2.8.192.9.182.10.7

Sources

CVE-2021-20191 · published · modified · JSON