VDB

DEBIAN-CVE-2019-10206

DEBIAN-CVE-2019-10206 PUBLISHED CVSS 6.5 MEDIUM

ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Debian:12ansible0, 0, 0
Debian:14ansible0, 0, 0
Debian:11ansible0, 0, 0
Debian:13ansible0, 0, 0

Timeline

  • Nov 22, 2019 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›