Lucene search
GoogleOSV:GHSA-J667-C2HM-F2WPHistoryFeb 09, 2022 - 9:59 p.m.
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
2022-02-0921:59:39
Google
osv.dev
16
0.0005 Low
EPSS
Percentile
17.1%
A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (–check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332
github.com/ansible/ansible
github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst#security-fixes-4
github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-6
github.com/ansible/ansible/pull/71033
nvd.nist.gov/vuln/detail/CVE-2020-14332
www.debian.org/security/2021/dsa-4950
Related
osv
osv
CVE-2020-14332
2020-09-11 18:15:13
PYSEC-2020-4
2020-09-11 18:15:00
ansible - security update
2021-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2020-14332
2020-09-11 00:00:00
redhatcve
redhatcve
CVE-2020-14332
2020-07-16 19:37:34
cve
cve
CVE-2020-14332
2020-09-11 18:15:13
prion
prion
Security feature bypass
2020-09-11 18:15:00
veracode
veracode
Information Disclosure
2020-09-14 03:13:12
cvelist
cvelist
CVE-2020-14332
2020-09-11 17:59:30
alpinelinux
alpinelinux
CVE-2020-14332
2020-09-11 18:15:13
github
github
nvd
nvd
CVE-2020-14332
2020-09-11 18:15:13
debiancve
debiancve
CVE-2020-14332
2020-09-11 18:15:13
nessus
nessus
Fedora 31 : ansible (2020-1e6eeadbb4)
2020-08-20 00:00:00
Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)
2023-09-27 00:00:00
Fedora 32 : ansible (2020-d5e74bf9a0)
2020-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: ansible-2.9.12-1.fc31
2020-08-20 01:05:14
[SECURITY] Fedora 32 Update: ansible-2.9.13-1.fc32
2020-09-08 15:27:25
openvas
openvas
Fedora: Security Advisory for ansible (FEDORA-2020-1e6eeadbb4)
2020-08-20 00:00:00
Fedora: Security Advisory for ansible (FEDORA-2020-d5e74bf9a0)
2020-09-09 00:00:00
Debian: Security Advisory (DSA-4950-1)
2021-08-08 00:00:00
redhat
redhat
(RHSA-2020:3600) Important: Ansible security and bug fix update (2.8.15)
2020-09-01 19:10:09
debian
debian
[SECURITY] [DSA 4950-1] ansible security update
2021-08-07 09:26:39
suse
suse
Security update for ansible (important)
2022-03-16 00:00:00