CVE-2018-16876
03.01.2019, 15:29
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | ansible | 2.5.0 ≤ 𝑥 < 2.5.14 |
| redhat | ansible | 2.6.0 ≤ 𝑥 < 2.6.11 |
| redhat | ansible | 2.7.0 ≤ 𝑥 < 2.7.5 |
| debian | debian_linux | 9.0 |
| redhat | ansible_engine | 2.0 |
| redhat | ansible_engine | 2.5 |
| redhat | ansible_engine | 2.6 |
| redhat | ansible_engine | 2.7 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| suse | package_hub | - |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References