CVE-2021-20191

2 advisories.

PyPI/ansible CVE-2021-20191: medium 5.5, EPSS 0.35%

Insertion of Sensitive Information into Log File in ansible

Action: Upgrade ansible to 2.8.19rc1 or later.

pip install ansible==2.9.18rc1

pip install ansible==2.8.19rc1

pip install ansible==2.10.7

Affected

introduced	fixed	last affected
2.9.0a1	2.9.18rc1	-
0	2.8.19rc1	-
2.10.0a1	2.10.7	-

Fixed versions

2.9.18rc1

2.8.19rc1

2.10.7

Sources

CVE-2021-20191 · published 2021-06-01T21:38:33Z · modified 2024-09-10T22:06:37.487770Z · JSON

PyPI/ansible CVE-2021-20191: unknown, EPSS 0.35%

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of

Action: Upgrade ansible to 2.8.19 or later.

pip install ansible==2.8.19

pip install ansible==2.9.18

pip install ansible==2.10.7

Affected

introduced	fixed	last affected
0	2.8.19	-
2.9.0	2.9.18	-
2.10.0	2.10.7	-

Fixed versions

2.8.19

2.9.18

2.10.7

Sources

CVE-2021-20191 · published 2021-05-26T21:15:00Z · modified 2023-11-08T04:04:35.345555Z · JSON