Information Disclosure

2019-10-2408:40:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.5%

JSON

ansible is vulnerable to information disclosure. When Sumologic and Splunk callback plugins are used with a setting of no_log parameter set to true, it disrespects the setting, causing a leakage of tasks results events to collectors and discloses any sensitive data.

CPENameOperatorVersion
ansibleeq2.6.0a1- 2.7.14
ansiblele2.9.0
ansiblele2.8.6
ansibleeq2.8.1__1.el7ae
ansibleeq2.8.5__1.el7
ansibleeq2.5.15__1.el7ae
ansibleeq2.2.0__0.50.prerelease.el7
ansibleeq2.7.2__1.el7
ansibleeq2.7.5__1.el7ae
ansibleeq2.6.10__1.el7ae

Name	Operator	Version
ansible	eq	2.6.0a1- 2.7.14
ansible	le	2.9.0
ansible	le	2.8.6
ansible	eq	2.8.1__1.el7ae
ansible	eq	2.8.5__1.el7
ansible	eq	2.5.15__1.el7ae
ansible	eq	2.2.0__0.50.prerelease.el7
ansible	eq	2.7.2__1.el7
ansible	eq	2.7.5__1.el7ae
ansible	eq	2.6.10__1.el7ae