CVE-2019-10206

2 advisories.

PyPI/ansible CVE-2019-10206: medium 6.5, EPSS 1.52%

Ansible password prompts could expose passwords

Action: Upgrade ansible to 2.6.19 or later.

pip install ansible==2.8.4

pip install ansible==2.7.13

pip install ansible==2.6.19

Affected

introduced	fixed	last affected
2.8.0	2.8.4	-
2.7.0	2.7.13	-
2.6.0	2.6.19	-

Fixed versions

2.8.4

2.7.13

2.6.19

Sources

CVE-2019-10206 · published 2022-05-24T17:01:46Z · modified 2024-11-25T05:23:22.828959Z · JSON

PyPI/ansible CVE-2019-10206: unknown, EPSS 1.52%

ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain