Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-16859
2.1
LOWCVSS v2
Published
November 29, 2018
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.>= 2.7.0a1, < 2.7.3, < 2.5.12, >= 2.6.0a1, < 2.6.9, >= 2.7.0, < 2.7.4, >= 2.7.5, < 2.8.1, < 2.5.13, >= 2.6.0, < 2.6.10NVD
ansiblePython Package IndexRadically simple IT automation
Python Package IndexRadically simple IT automation>= 2.7.0a1, < 2.7.3, < 2.5.12, >= 2.6.0a1, < 2.6.9, >= 2.7.0, < 2.7.4, >= 2.7.5, < 2.8.1, < 2.5.13, >= 2.6.0, < 2.6.10OSV