PT-2018-5044 · Red Hat+1 · Ansible+1

Wouteroostervld · Published 2017-03-30 · Updated 2024-05-06 · CVE-2016-8647

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.2.1.0

Description An input validation issue was discovered in the mysql user module, potentially causing password changes to fail under certain conditions, resulting in the previous password remaining active.

Recommendations For versions prior to 2.2.1.0, update to version 2.2.1.0 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-1386

CVE-2016-8647

GHSA-X4CM-M36H-C6QJ

MGASA-2017-0164

PYSEC-2018-58

RHSA-2017:1685

SUSE-SU-2020:3309-1

SUSE-SU-2024:1427-1

SUSE-SU-2024:1509-1

Affected Products

Alt Linux

Ansible

References · 156

• https://osv.dev/vulnerability/SUSE-SU-2020:3309-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1685 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-8647 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0164 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8647 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-8647 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-8647 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0164.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1509-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8647 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/UQMRFYTFTPAGI22UEXIEZH4U4BOTGVWH · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/WJGWOHRWU3FB2DF3V6NNS4GGBWKSOWYA · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-8647 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-8647 · Security Note