CVE-2018-16859

2 advisories.

PyPI/ansible CVE-2018-16859: medium 4.4

Ansible Logs Passwords If PowerShell ScriptBlock is Enabled

Action: Upgrade ansible to 2.5.12 or later.

pip install ansible==2.7.3

pip install ansible==2.5.12

pip install ansible==2.6.9

Affected

introduced	fixed	last affected
2.7.0a1	2.7.3	-
0	2.5.12	-
2.6.0a1	2.6.9	-

Fixed versions

2.7.3

2.5.12

2.6.9

Sources

CVE-2018-16859 · published 2022-05-14T01:14:00Z · modified 2024-09-04T19:46:25.167417Z · JSON

PyPI/ansible CVE-2018-16859: unknown

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user wi

Action: Upgrade ansible to 2.5.13 or later.

pip install ansible==2.7.4

pip install ansible==2.8.1

pip install ansible==2.5.13

pip install ansible==2.6.10

Affected

introduced	fixed	last affected
0	2.5.13	-
2.6.0	2.6.10	-
2.7.0	2.7.4	-
2.7.5	2.8.1	-

Fixed versions

2.7.4

2.8.1

2.5.13

2.6.10

Sources

CVE-2018-16859 · published 2018-11-29T18:29:00Z · modified 2026-06-10T17:00:17.877642758Z · JSON