CVE-2020-1746
2 advisories.
PyPI/ansible CVE-2020-1746: medium 5
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Action: Upgrade ansible to 2.7.17 or later.
pip install ansible==2.8.11pip install ansible==2.9.7pip install ansible==2.7.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.8.0a1 | 2.8.11 | - |
| 2.9.0a1 | 2.9.7 | - |
| 2.7.0a1 | 2.7.17 | - |
Fixed versions
| 2.8.11 | 2.9.7 | 2.7.17 |
Sources
- osv: GHSA-j2h6-73x8-22c4
- https://nvd.nist.gov/vuln/detail/CVE-2020-1746
- https://github.com/ansible/ansible/pull/67866
- https://github.com/ansible/ansible/commit/d41e38435b1a9e300d8011ac28f16a5add2db119
- https://github.com/ansible/ansible/commit/e6199d768c1c18a4e750ec78d4ded088629baa3f
- https://github.com/ansible/ansible/commit/edd1e1723cc937ec9251adf38c1199a00b0bf6d4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1746
- https://github.com/advisories/GHSA-j2h6-73x8-22c4
- https://github.com/ansible/ansible
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-13.yaml
- https://www.debian.org/security/2021/dsa-4950
CVE-2020-1746 · published · modified · JSON
PyPI/ansible CVE-2020-1746: unknown
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5
Action: Upgrade ansible to 2.7.17 or later.
pip install ansible==2.7.17pip install ansible==2.8.11pip install ansible==2.9.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.17 | - |
| 2.8.0 | 2.8.11 | - |
| 2.9.0 | 2.9.7 | - |
Fixed versions
| 2.7.17 | 2.8.11 | 2.9.7 |
Sources
- osv: PYSEC-2020-13
- https://github.com/ansible/ansible/pull/67866
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1746
- https://github.com/advisories/GHSA-j2h6-73x8-22c4
CVE-2020-1746 · published · modified · JSON