Vulnetix
Try Vulnetix Request Demo
CVE-2017-7550 REJECTED

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.

EPSS 0.68% · 71.3th percentile

Risk Scores

EPSS Score
0.68%
71.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSansible0, 2.3.1.0+dfsg-2, 2.5.0+dfsg-1

Timeline

References

Open in Interactive Console →