Lucene search

K

Veracode Vulnerability DatabaseVERACODE:12553

HistoryJan 15, 2019 - 9:18 a.m.

Passwords Fail To Change

2019-01-1509:18:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

14

EPSS

0.001

Percentile

28.7%

ansible doesn’t always succeed in changing a user’s password. The mysql_user module has a flaw which means that the user’s passwords sometimes fails to change without telling the user. This means that old passwords may still be active when it should have been modified.

References

access.redhat.com/errata/RHSA-2017:1685

access.redhat.com/security/cve/CVE-2016-8647

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1396174

bugzilla.redhat.com/show_bug.cgi?id=1446527

bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647

github.com/ansible/ansible-modules-core/pull/5388

EPSS

0.001

Percentile

28.7%

Related for VERACODE:12553

osv3 nvd1 cvelist1 debiancve1 redhatcve1 ubuntucve1 cve1 veracode1 prion1 github1 nessus6 openvas3 fedora2 mageia1 redhat1