CVE-2019-14856
2 advisories.
PyPI/ansible CVE-2019-14856: medium 6.5
Ansible password prompts could expose passwords
Action: Upgrade ansible to 2.6.20 or later.
pip install ansible==2.8.6pip install ansible==2.7.14pip install ansible==2.6.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.8.0 | 2.8.6 | - |
| 2.7.0 | 2.7.14 | - |
| 2.6.0 | 2.6.20 | - |
Fixed versions
| 2.8.6 | 2.7.14 | 2.6.20 |
Sources
- osv: GHSA-6fq2-x65v-v9h7
- https://nvd.nist.gov/vuln/detail/CVE-2019-14856
- https://github.com/ansible/ansible/pull/63351
- https://github.com/ansible/ansible/commit/16684f118715a52e1c46d437652add9ca36423de
- https://github.com/ansible/ansible/commit/2cbd8775ca1271195169f62122df1f88b532e74f
- https://github.com/ansible/ansible/commit/40618d70e61af1123907a5fb246cc4fd35f1e5c3
- https://github.com/ansible/ansible/commit/7f4befdea77045fa83b5f2b304bd5e16b219f74c
- https://access.redhat.com/errata/RHSA-2020:0756
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856
- https://github.com/ansible/ansible
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-146.yaml
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
CVE-2019-14856 · published · modified · JSON
PyPI/ansible CVE-2019-14856: unknown
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
Action: Upgrade ansible to 2.6.20 or later.
pip install ansible==2.6.20pip install ansible==2.7.14pip install ansible==2.8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.0 | 2.6.20 | - |
| 2.7.0 | 2.7.14 | - |
| 2.8.0 | 2.8.6 | - |
Fixed versions
| 2.6.20 | 2.7.14 | 2.8.6 |
Sources
- osv: PYSEC-2019-146
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856
- https://access.redhat.com/errata/RHSA-2020:0756
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
- https://github.com/advisories/GHSA-6fq2-x65v-v9h7
CVE-2019-14856 · published · modified · JSON