Exposure of Sensitive Information to an Unauthorized Actor in ansible

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-10217 · ADVISORY
• ansible/ansible · WEB
• ansible/ansible#59427 · WEB
• ansible/ansible commit c1ee1f1 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• GitHub Advisory GHSA-p75j-wc34-527c · ADVISORY
• ansible/ansible · PACKAGE
• pypa/advisory-database · WEB
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html · WEB
• lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html · WEB

ansible 的其他漏洞

• CVE-2025-14010中危 5.5A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, …
• CVE-2023-5115中危 6.3An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role …
• CVE-2022-3697高危 7.5A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. Th…
• CVE-2021-20180中危 5.5A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature w…
• CVE-2021-3620中危 5.5A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclose…