CVE-2019-10156

2 advisories.

PyPI/ansible CVE-2019-10156: medium 5.4

Exposure of Sensitive Information to an Unauthorized Actor in ansible

Action: Upgrade ansible to 2.6.18 or later.

pip install ansible==2.6.18

pip install ansible==2.7.12

pip install ansible==2.8.2

Affected

introduced	fixed	last affected
0	2.6.18	-
2.7.0a1	2.7.12	-
2.8.0a1	2.8.2	-

Fixed versions

2.6.18

2.7.12

2.8.2

Sources

CVE-2019-10156 · published 2019-07-31T04:22:49Z · modified 2024-09-04T21:02:06.281445Z · JSON

PyPI/ansible CVE-2019-10156: unknown

A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitut