CVE-2019-14858

2 advisories.

PyPI/ansible CVE-2019-14858: medium 5.5, EPSS 0.42%

Ansible leaks sensitive information to logs when told not to

Action: Upgrade ansible to 2.6.20 or later.

pip install ansible==2.9.0rc4

pip install ansible==2.8.6

pip install ansible==2.7.14

pip install ansible==2.6.20

Affected

introduced	fixed	last affected
2.9.0a1	2.9.0rc4	-
2.8.0a1	2.8.6	-
2.7.0a1	2.7.14	-
2.0	2.6.20	-

Fixed versions

2.9.0rc4

2.8.6

2.7.14

2.6.20

Sources

CVE-2019-14858 · published 2022-05-24T16:58:43Z · modified 2024-09-10T22:06:17.528452Z · JSON

PyPI/ansible CVE-2019-14858: unknown, EPSS 0.42%

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to

Action: Upgrade ansible to 2.8.1 or later.

pip install ansible==2.8.1

Affected

introduced	fixed	last affected
2.0	2.8.1	-

Fixed versions

2.8.1

Sources

CVE-2019-14858 · published 2019-10-14T15:15:00Z · modified 2026-06-10T17:00:18.580471794Z · JSON