| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| ansible | ≥ 2.10.0, < 2.10.7≥ 2.10.0a1, < 2.10.7≥ 2.9.0, < 2.9.18≥ 2.9.0a1, < 2.9.18rc1< 2.8.19< 2.8.19rc1 | 2.10.72.9.182.9.18rc12.8.192.8.19rc1 |
| virtualization | = 4.0 | |
| ansible | ≥ 2.10.0, < 2.10.7≥ 2.9.0, < 2.9.18< 2.8.19 | 2.10.72.9.182.8.19 |
| ansible tower | = 3.0 | |
| cisco nx-os collection | < 1.4.0 | 1.4.0 |
| community general collection | ≥ 2.0.0, < 2.0.1< 1.3.6 | 2.0.11.3.6 |
| community network collection | ≥ 2.0.0, < 2.0.1< 1.3.2 | 2.0.11.3.2 |
| docker community collection | < 1.2.2 | 1.2.2 |
| google cloud platform ansible collection | = 1.0.2 |
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン