PT-2019-6151 · Red Hat+4 · Ansible+4
Bcoca
·
Publicado
2019-06-06
·
Atualizado
2026-06-03
·
CVE-2019-10156
CVSS v2.0
5.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Ansible versions prior to 2.6.18
Ansible versions prior to 2.7.12
Ansible versions prior to 2.8.2
Description
A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution, the content of any variable may be disclosed. This issue may allow a remote attacker to access and compromise confidential data.
Recommendations
For versions prior to 2.6.18, update to version 2.6.18 or later.
For versions prior to 2.7.12, update to version 2.7.12 or later.
For versions prior to 2.8.2, update to version 2.8.2 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ansible
Ansible-Core
Astra Linux
Ubuntu