CVE-2017-7550

2 advisories.

PyPI/ansible CVE-2017-7550: critical 9.8

Ansible Insertion of Sensitive Information into Log File vulnerability

Action: Upgrade ansible to 2.3.3.0 or later.

pip install ansible==2.4.1.0

pip install ansible==2.3.3.0

Affected

introduced	fixed	last affected
2.4.0.0	2.4.1.0	-
2.3.0.0	2.3.3.0	-

Fixed versions

2.4.1.0

2.3.3.0

Sources

osv: GHSA-588w-w6mv-3cw5
https://nvd.nist.gov/vuln/detail/CVE-2017-7550
https://github.com/ansible/ansible/issues/30874
https://github.com/ansible/ansible/commit/facbf7f14da29eea67ef68ab386fc15bd06d7c7f
https://access.redhat.com/errata/RHSA-2017:2966
https://access.redhat.com/security/cve/CVE-2017-7550
https://bugzilla.redhat.com/show_bug.cgi?id=1473645
https://github.com/ansible/ansible
https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2017-4.yaml

CVE-2017-7550 · published 2022-05-13T01:06:04Z · modified 2024-09-04T20:21:24.723295Z · JSON

PyPI/ansible CVE-2017-7550: unknown

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive inform