{"action":"Upgrade ansible to 2.7.17 or later.","affected":[{"fixed":"2.7.17","introduced":"0"},{"fixed":"2.8.11","introduced":"2.8.0a1"},{"fixed":"2.9.7","introduced":"2.9.0a1"}],"component":"ansible","cve_ids":["CVE-2020-1739"],"ecosystem":"PyPI","epss":0.00361,"exploited":false,"fixed_versions":["2.7.17","2.8.11","2.9.7"],"ghsa_id":"GHSA-923p-fr2c-g5m2","id":"tcs_01M5KF9EPSDZGEQDJCPT6531E4","modified_at":"2024-09-06T18:00:45.936862Z","published_at":"2021-04-07T20:30:44Z","references":["https://osv.dev/vulnerability/GHSA-923p-fr2c-g5m2","https://nvd.nist.gov/vuln/detail/CVE-2020-1739","https://github.com/ansible/ansible/issues/67797","https://github.com/ansible/ansible/pull/68911","https://github.com/ansible/ansible/pull/68912","https://github.com/ansible/ansible/pull/68913","https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237","https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f","https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4","https://www.debian.org/security/2021/dsa-4950","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3","https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml","https://github.com/ansible/ansible","https://github.com/advisories/GHSA-923p-fr2c-g5m2","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"GHSA-923p-fr2c-g5m2","url":"https://osv.dev/vulnerability/GHSA-923p-fr2c-g5m2"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Ansible"}