tocsin

CVE-2019-14864

2 advisories.

PyPI/ansible CVE-2019-14864: medium 6.5, EPSS 1.87%

Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible

Action: Upgrade ansible to 2.7.15 or later.

pip install ansible==2.7.15
pip install ansible==2.8.7
pip install ansible==2.9.1

Affected

introducedfixedlast affected
2.7.0a12.7.15-
2.8.0a12.8.7-
2.9.0a12.9.1-

Fixed versions

2.7.152.8.72.9.1

Sources

CVE-2019-14864 · published · modified · JSON

PyPI/ansible CVE-2019-14864: unknown, EPSS 1.87%

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used

Action: Upgrade ansible to 2.7.15 or later.

pip install ansible==2.7.15
pip install ansible==2.8.7
pip install ansible==2.9.1

Affected

introducedfixedlast affected
2.7.02.7.15-
2.8.02.8.7-
2.9.02.9.1-

Fixed versions

2.7.152.8.72.9.1

Sources

CVE-2019-14864 · published · modified · JSON