CVE-2018-10855

2018-07-0301:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible.

CPENameOperatorVersion
ansibleeq2.4.0.0-0.4.rc4
ansibleeq1.8.4-r0
ansibleeq2.4.1.0-0.3.rc1
ansibleeq1.5.1
ansibleeq2.1.0.0-r0
ansibleeq2.1.2.0-r0
ansibleeq0.5-r0
ansibleeq2.2.1.0-r1
ansibleeq2.4.3.0-1
ansibleeq2.4.0.0-0.2.rc2

Name	Operator	Version
ansible	eq	2.4.0.0-0.4.rc4
ansible	eq	1.8.4-r0
ansible	eq	2.4.1.0-0.3.rc1
ansible	eq	1.5.1
ansible	eq	2.1.0.0-r0
ansible	eq	2.1.2.0-r0
ansible	eq	0.5-r0
ansible	eq	2.2.1.0-r1
ansible	eq	2.4.3.0-1
ansible	eq	2.4.0.0-0.2.rc2