Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:25405
HistoryMay 14, 2020 - 3:09 a.m.

Information Disclosure

2020-05-1403:09:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.0005 Low

EPSS

Percentile

17.6%

JSON

Ansible is vulnerable to information disclosure. The library leaks sensitive parameters such as passwords and tokens as it passed the sensitive information to kubectl from the command line, not using an environment variable or an input configuration file while managing kubernetes using the k8s module.

Related

osv 4
nessus 11
ubuntucve 1
debiancve 1
cvelist 1
nvd 1
github 1
cve 1
prion 1
redhatcve 1
redhat 3
fedora 3
openvas 5
gentoo 1
mageia 1
debian 1
suse 1
osv
osv
CVE-2020-1753
2020-03-16 15:15:13
PYSEC-2020-210
2020-03-16 15:15:00
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
2021-04-07 20:33:26
nessus
nessus
RHEL 7 : Ansible security update (2.7.18) (Moderate) (RHSA-2020:2142)
2020-05-13 00:00:00
Ansible Tower 3.4.x =< 3.4.5 / 3.5.x =< 3.5.5 / 3.6.x =< 3.6.3 'k8s module' Information Disclosure Vulnerability
2020-05-20 00:00:00
Amazon Linux 2 : ansible (ALASANSIBLE2-2023-008)
2023-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2020-1753
2020-03-16 00:00:00
debiancve
debiancve
CVE-2020-1753
2020-03-16 15:15:13
cvelist
cvelist
CVE-2020-1753
2020-03-16 14:37:21
nvd
nvd
CVE-2020-1753
2020-03-16 15:15:13
github
github
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
2021-04-07 20:33:26
cve
cve
CVE-2020-1753
2020-03-16 15:15:13
prion
prion
Input validation
2020-03-16 15:15:00
redhatcve
redhatcve
CVE-2020-1753
2020-03-09 08:10:49
redhat
redhat
(RHSA-2020:2142) Moderate: Ansible security and bug fix update (2.7.18)
2020-05-13 15:09:21
(RHSA-2020:1542) Important: Ansible security and bug fix update (2.9.7)
2020-04-22 13:12:44
(RHSA-2020:1541) Important: Ansible security and bug fix update (2.9.7)
2020-04-22 13:12:31
fedora
fedora
[SECURITY] Fedora 30 Update: ansible-2.9.7-1.fc30
2020-04-27 03:07:00
[SECURITY] Fedora 31 Update: ansible-2.9.7-1.fc31
2020-04-27 04:48:07
[SECURITY] Fedora 32 Update: ansible-2.9.7-1.fc32
2020-04-27 02:46:08
openvas
openvas
Fedora: Security Advisory for ansible (FEDORA-2020-1b6ce91e37)
2020-04-30 00:00:00
Mageia: Security Advisory (MGASA-2020-0217)
2022-01-28 00:00:00
Fedora: Security Advisory for ansible (FEDORA-2020-f80154b5b4)
2020-04-30 00:00:00
gentoo
gentoo
Ansible: Multiple vulnerabilities
2020-06-13 00:00:00
mageia
mageia
Updated ansible packages fix security vulnerabilities
2020-05-24 21:04:47
debian
debian
[SECURITY] [DSA 4950-1] ansible security update
2021-08-07 09:26:39
suse
suse
Security update for ansible (important)
2022-03-16 00:00:00

0.0005 Low

EPSS

Percentile

17.6%

JSON
Related for VERACODE:25405
osv4nessus11ubuntucve1debiancve1cvelist1nvd1github1cve1prion1redhatcve1redhat3fedora3openvas5gentoo1mageia1debian1suse1