{"action":"Upgrade ansible to 2.4.5.0 or later.","affected":[{"fixed":"2.4.5.0","introduced":"2.4"},{"fixed":"2.5.5","introduced":"2.5"}],"component":"ansible","cve_ids":["CVE-2018-10855"],"ecosystem":"PyPI","epss":0.03113,"exploited":false,"fixed_versions":["2.5.5","2.4.5.0"],"ghsa_id":"GHSA-jwcc-j78w-j73w","id":"tcs_01M5KG7ZR5PGW8CCGCSEY1H97E","modified_at":"2023-11-08T03:59:43.874586Z","published_at":"2018-07-03T01:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-42","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10855","https://access.redhat.com/errata/RHSA-2018:2079","https://access.redhat.com/errata/RHSA-2018:2022","https://access.redhat.com/errata/RHSA-2018:1949","https://access.redhat.com/errata/RHSA-2018:1948","https://access.redhat.com/errata/RHSA-2018:2184","https://access.redhat.com/errata/RHSA-2018:2585","https://access.redhat.com/errata/RHBA-2018:3788","https://access.redhat.com/errata/RHSA-2019:0054","https://www.debian.org/security/2019/dsa-4396","https://usn.ubuntu.com/4072-1/","https://github.com/advisories/GHSA-jwcc-j78w-j73w"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-42","url":"https://osv.dev/vulnerability/PYSEC-2018-42"}],"summary":"Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged,"}