PT-2018-13775 · Ansible+2 · Ansible Engine+2
Nitzmahone
·
Publicado
2018-11-29
·
Atualizado
2026-06-03
·
CVE-2018-16859
CVSS v4.0
6.7
Média
| Vetor | AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ansible Engine versions prior to 2.9
Description
The issue allows for 'become' passwords to appear in EventLogs in plaintext when executing Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled. A local user with administrator privileges can view these logs and discover the plaintext password.
Recommendations
For Ansible Engine versions prior to 2.9, consider disabling PowerShell ScriptBlock logging and Module logging as a temporary workaround to prevent plaintext passwords from being logged. Restrict access to EventLogs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ansible Engine
Suse