PT-2019-6151 · Red Hat+4 · Ansible+4
Bcoca
·
Published
2019-06-06
·
Updated
2026-06-03
·
CVE-2019-10156
CVSS v2.0
5.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Ansible versions prior to 2.6.18
Ansible versions prior to 2.7.12
Ansible versions prior to 2.8.2
Description
A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution, the content of any variable may be disclosed. This issue may allow a remote attacker to access and compromise confidential data.
Recommendations
For versions prior to 2.6.18, update to version 2.6.18 or later.
For versions prior to 2.7.12, update to version 2.7.12 or later.
For versions prior to 2.8.2, update to version 2.8.2 or later.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Ansible
Ansible-Core
Astra Linux
Ubuntu