CVE-2020-1753
2 advisories.
PyPI/ansible CVE-2020-1753: medium 5.5
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Action: Upgrade ansible to 2.7.18 or later.
pip install ansible==2.7.18pip install ansible==2.8.12pip install ansible==2.9.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0a1 | 2.7.18 | - |
| 2.8.0a1 | 2.8.12 | - |
| 2.9.0a1 | 2.9.7 | - |
Fixed versions
| 2.7.18 | 2.8.12 | 2.9.7 |
Sources
- osv: GHSA-86hp-cj9j-33vv
- https://nvd.nist.gov/vuln/detail/CVE-2020-1753
- https://github.com/ansible-collections/kubernetes/pull/51
- https://github.com/ansible/ansible/pull/68195
- https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380
- https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a
- https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753
- https://github.com/advisories/GHSA-86hp-cj9j-33vv
- https://github.com/ansible-collections/kubernetes
- https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
- https://security.gentoo.org/glsa/202006-11
- https://www.debian.org/security/2021/dsa-4950
CVE-2020-1753 · published · modified · JSON
PyPI/ansible CVE-2020-1753: unknown
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kuberne
Action: Upgrade ansible to 2.7.18 or later.
pip install ansible==2.7.18pip install ansible==2.8.11pip install ansible==2.9.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.18 | - |
| 2.8.0 | 2.8.11 | - |
| 2.9.0 | 2.9.7 | - |
Fixed versions
| 2.7.18 | 2.8.11 | 2.9.7 |
Sources
- osv: PYSEC-2020-210
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753
- https://github.com/ansible-collections/kubernetes/pull/51
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
- https://security.gentoo.org/glsa/202006-11
- https://github.com/advisories/GHSA-86hp-cj9j-33vv
CVE-2020-1753 · published · modified · JSON