Vulnetix
Try Vulnetix Request Demo
CVE-2019-10217 REJECTED

A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setting no_log to True. Any sensitive data managed by that function would be leak as an output when running ansible playbooks.

EPSS 0.43% · 62.1th percentile

Risk Scores

EPSS Score
0.43%
62.1th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSansible0, 2.8.3+dfsg-1

Timeline

References

Open in Interactive Console →