Lucene search
Veracode Vulnerability DatabaseVERACODE:25943HistoryJul 23, 2020 - 3:37 a.m.
Information Disclosure
2020-07-2303:37:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
26.2%
ansible is vulnerable to information disclosure. The vulnerability exists as sensitive information such as keys are exposed into content and json output when the no_log_values on the uri module is set.
References
bugzilla.redhat.com/show_bug.cgi?id=1857185
bugzilla.redhat.com/show_bug.cgi?id=1857186
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330
github.com/ansible/ansible/commit/bf98f031f3f5af31a2d78dc2f0a58fe92ebae0bb
github.com/ansible/ansible/issues/68400
github.com/ansible/ansible/issues/70455
github.com/ansible/ansible/pull/70762
github.com/ansible/ansible/pull/70820
www.debian.org/security/2021/dsa-4950
Related
cvelist
cvelist
CVE-2020-14330
2020-09-11 00:00:00
osv
osv
CVE-2020-14330
2020-09-11 18:15:13
PYSEC-2020-3
2020-09-11 18:15:00
debiancve
debiancve
CVE-2020-14330
2020-09-11 18:15:13
cve
cve
CVE-2020-14330
2020-09-11 18:15:13
ubuntucve
ubuntucve
CVE-2020-14330
2020-09-11 00:00:00
redhatcve
redhatcve
CVE-2020-14330
2020-07-14 18:50:50
prion
prion
Input validation
2020-09-11 18:15:00
nvd
nvd
CVE-2020-14330
2020-09-11 18:15:13
alpinelinux
alpinelinux
CVE-2020-14330
2020-09-11 18:15:13
github
github
fedora
fedora
[SECURITY] Fedora 31 Update: ansible-2.9.12-1.fc31
2020-08-20 01:05:14
[SECURITY] Fedora 32 Update: ansible-2.9.13-1.fc32
2020-09-08 15:27:25
nessus
nessus
Fedora 31 : ansible (2020-1e6eeadbb4)
2020-08-20 00:00:00
Fedora 32 : ansible (2020-d5e74bf9a0)
2020-09-09 00:00:00
Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)
2023-09-27 00:00:00
openvas
openvas
Fedora: Security Advisory for ansible (FEDORA-2020-1e6eeadbb4)
2020-08-20 00:00:00
Fedora: Security Advisory for ansible (FEDORA-2020-d5e74bf9a0)
2020-09-09 00:00:00
Debian: Security Advisory (DSA-4950-1)
2021-08-08 00:00:00
redhat
redhat
(RHSA-2020:3600) Important: Ansible security and bug fix update (2.8.15)
2020-09-01 19:10:09
debian
debian
[SECURITY] [DSA 4950-1] ansible security update
2021-08-07 09:26:39
suse
suse
Security update for ansible (important)
2022-03-16 00:00:00
