{"action":"Upgrade ansible to 2.8.14 or later.","affected":[{"fixed":"2.8.14","introduced":"2.8.0"},{"fixed":"2.9.12","introduced":"2.9.0"}],"component":"ansible","cve_ids":["CVE-2020-14332"],"ecosystem":"PyPI","epss":0.00407,"exploited":false,"fixed_versions":["2.8.14","2.9.12"],"ghsa_id":"GHSA-j667-c2hm-f2wp","id":"tcs_01M5KGAMYR1TWZDNJ99K55T9TX","modified_at":"2023-11-08T04:02:26.234115Z","published_at":"2020-09-11T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-4","https://github.com/ansible/ansible/pull/71033","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332","https://github.com/advisories/GHSA-j667-c2hm-f2wp"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"PYSEC-2020-4","url":"https://osv.dev/vulnerability/PYSEC-2020-4"},{"source":"nvd","source_id":"CVE-2020-14332","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14332"}],"summary":"A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unaut"}