PT-2020-6576 · Ansible+2 · Ansible+2
Hungluong5791
·
Published
2020-09-11
·
Updated
2026-06-03
·
CVE-2020-14330
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ansible (affected versions not specified)
Description
The issue is related to an improper output neutralization for logs flaw in the uri module of Ansible, where sensitive data is exposed to content and json output. This allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this issue is to data confidentiality.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Fix
Insertion into Log File
Improper Encoding or Escaping of Output
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Ansible
Astra Linux