PT-2017-17794 · Red Hat+2 · Ansible+2

Abadger · Published 2017-11-02 · Updated 2026-06-03 · CVE-2017-7550

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ansible versions 2.3.x through 2.3.2 Ansible versions 2.4.x through 2.4.0

Description A flaw was found in the way Ansible passed certain parameters to the jenkins plugin module, allowing remote attackers to expose sensitive information from a remote host's logs. The issue was resolved by not allowing passwords to be specified in the params argument.

Recommendations For Ansible versions 2.3.x through 2.3.2, update to version 2.3.3 or later. For Ansible versions 2.4.x through 2.4.0, update to version 2.4.1 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

ALT-PU-2018-1624

CVE-2017-7550

GHSA-588W-W6MV-3CW5

MGASA-2017-0399

OPENSUSE-SU-2017:2976-1

OPENSUSE-SU-2017:2978-1

OPENSUSE-SU-2024:10615-1

OPENSUSE-SU-2024:14244-1

OPENSUSE-SU-2024:14536-1

OPENSUSE-SU-2025:15605-1

OPENSUSE-SU-2025:15753-1

OPENSUSE-SU-2026:10944-1

PYSEC-2017-4

RHSA-2017:2966

SUSE-SU-2018:0605-1

SUSE-SU-2020:3309-1

SUSE-SU-2024:1427-1

SUSE-SU-2024:1509-1

Affected Products

Alt Linux

Ansible

Ansible-Core

References · 174

• https://osv.dev/vulnerability/SUSE-SU-2020:3309-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-7550 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2966 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1427-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7550 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15605-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2017-4 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:2978-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0399.html · Security Note
• https://cve.org/CVERecord?id=CVE-2017-7550 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10944-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1509-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-7550 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14244-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15753-1 · Vendor Advisory