tocsin

Alpine/ansible: medium 5.5

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of

Action: Upgrade ansible to 2.8.19-r0 or later.

Affected

introducedfixedlast affected
2.9.0--

Fixed versions

2.8.19-r0

Sources

published · modified · JSON