CVE-2019-14846

2 advisories.

PyPI/ansible CVE-2019-14846: high 7.8, EPSS 0.51%

Ansible Uses Plugins That Disclose Credentials

Action: Upgrade ansible to 2.6.20 or later.

pip install ansible==2.6.20

pip install ansible==2.7.14

pip install ansible==2.8.6

Affected

introduced	fixed	last affected
0	2.6.20	-
2.7.0a1	2.7.14	-
2.8.0a1	2.8.6	-

Fixed versions

2.6.20

2.7.14

2.8.6

Sources

CVE-2019-14846 · published 2022-05-24T16:58:01Z · modified 2024-09-09T21:21:14.766643Z · JSON

PyPI/ansible CVE-2019-14846: unknown, EPSS 0.51%

In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin