Lucene search
GoogleOSV:PYSEC-2020-160HistoryJan 02, 2020 - 3:15 p.m.
PYSEC-2020-160
2020-01-0215:15:00
Google
osv.dev
6
0.003 Low
EPSS
Percentile
68.5%
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.
References
lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14864
github.com/advisories/GHSA-3m93-m4q6-mc6v
github.com/ansible/ansible/issues/63522
github.com/ansible/ansible/pull/63527
Related
mageia
mageia
Updated ansible packages fix security vulnerability
2019-12-06 17:15:42
veracode
veracode
Information Disclosure
2019-10-24 08:40:31
redhat
redhat
(RHSA-2019:3928) Moderate: ansible security and bug fix update
2019-11-20 14:32:13
(RHSA-2019:3926) Moderate: ansible security and bug fix update
2019-11-20 14:32:09
(RHSA-2019:3927) Moderate: ansible security and bug fix update
2019-11-20 14:32:11
nessus
nessus
RHEL 7 / 8 : ansible (RHSA-2019:3928)
2019-11-22 00:00:00
RHEL 7 / 8 : ansible (RHSA-2019:3926)
2019-11-22 00:00:00
Photon OS 3.0: Ansible PHSA-2020-3.0-0058
2020-02-20 00:00:00
nvd
nvd
CVE-2019-14864
2020-01-02 15:15:12
github
github
alpinelinux
alpinelinux
CVE-2019-14864
2020-01-02 15:15:12
cve
cve
CVE-2019-14864
2020-01-02 15:15:12
osv
osv
CVE-2019-14864
2020-01-02 15:15:12
Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
2020-02-26 19:54:31
ansible - security update
2021-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2019-14864
2020-01-02 00:00:00
prion
prion
Design/Logic Flaw
2020-01-02 15:15:00
cvelist
cvelist
CVE-2019-14864
2020-01-02 14:23:56
redhatcve
redhatcve
CVE-2019-14864
2019-10-22 12:51:32
symantec
symantec
Ansible CVE-2019-14864 Multiple Information Disclosure Vulnerabilities
2019-10-16 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0358)
2022-01-28 00:00:00
openSUSE: Security Advisory for ansible (openSUSE-SU-2020:0513-1)
2020-04-13 00:00:00
Debian: Security Advisory (DSA-4950-1)
2021-08-08 00:00:00
debiancve
debiancve
CVE-2019-14864
2020-01-02 15:15:12
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0058
2020-02-15 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0058
2020-02-15 00:00:00
suse
suse
Security update for ansible (moderate)
2020-04-13 00:00:00
Security update for ansible (moderate)
2020-04-16 00:00:00
debian
debian
[SECURITY] [DSA 4950-1] ansible security update
2021-08-07 09:26:39