Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5170
HistorySep 26, 2017 - 7:14 a.m.

Information Disclosure

2017-09-2607:14:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.008

Percentile

81.2%

ansible is vulnerable to information disclosure. The library contains a configuration example for passing Jenkins credentials as parameters. These parameters are logged, allowing a malicious user with access to the logs to have access to view the Jenkins credentials.