PT-2018-2516 · Red Hat+2 · Ansible+2
Sam Fowler
+1
·
Publicado
2018-06-08
·
Atualizado
2026-06-03
·
CVE-2018-10855
CVSS v4.0
8.2
Alta
| Vetor | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ansible versions 2.4 through 2.4.4
Ansible versions 2.5 through 2.5.4
Description
The issue is related to the incorrect handling of the
no log option in Ansible, which is designed to prevent task logging. When a task fails, sensitive data may be displayed in event logs and on the user's terminal, allowing a remote attacker to gain unauthorized access to information.Recommendations
For Ansible versions 2.4 through 2.4.4, update to version 2.4.5 or later.
For Ansible versions 2.5 through 2.5.4, update to version 2.5.5 or later.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ansible
Ubuntu