{"action":"Upgrade ansible to 2.7.18 or later.","affected":[{"fixed":"2.7.18","introduced":"2.7.0a1"},{"fixed":"2.8.12","introduced":"2.8.0a1"},{"fixed":"2.9.7","introduced":"2.9.0a1"}],"component":"ansible","cve_ids":["CVE-2020-1753"],"ecosystem":"PyPI","epss":0.0051,"exploited":false,"fixed_versions":["2.7.18","2.8.12","2.9.7"],"ghsa_id":"GHSA-86hp-cj9j-33vv","id":"tcs_01M5KF7E6PXRFVDXB7ZKQG0B1H","modified_at":"2024-09-09T21:31:13.734920Z","published_at":"2021-04-07T20:33:26Z","references":["https://osv.dev/vulnerability/GHSA-86hp-cj9j-33vv","https://nvd.nist.gov/vuln/detail/CVE-2020-1753","https://github.com/ansible-collections/kubernetes/pull/51","https://github.com/ansible/ansible/pull/68195","https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380","https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a","https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753","https://github.com/advisories/GHSA-86hp-cj9j-33vv","https://github.com/ansible-collections/kubernetes","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB","https://security.gentoo.org/glsa/202006-11","https://www.debian.org/security/2021/dsa-4950"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-86hp-cj9j-33vv","url":"https://osv.dev/vulnerability/GHSA-86hp-cj9j-33vv"}],"summary":"Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible"}