| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | < 2.9.27 | 2.9.27 |
| ansible automation platform early access | = 2.0 | |
| ansible engine | < 2.9.27 | 2.9.27 |
| openstack | = 1= 16.1 | |
| virtualization | = 4.0 | |
| virtualization for ibm power little endian | = 4.0 | |
| virtualization host | = 4.0 | |
| virtualization manager | = 4.4 |
Ansible is an IT automation system that handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. A flaw was found in Ansible Engine's ansible-connection module where sensitive information, such as the Ansible user credentials, is disclosed by default in the traceback error message when Ansible receives an unexpected response from set_options. The highest threat from this vulnerability is confidentiality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free