VDB

GCVE-110-MAGEIA-2017-399

GCVE-110-MAGEIA-2017-399
Advisory Published
Vulnetix · Advisory published November 2, 2017
A flaw was found in the way Ansible passed certain parameters to the jenkins_plugin module. A remote attacker could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation (CVE-2017-7550). The ansible package has been updated to version 2.4.1 to fix this issue and several other bugs.

Affected Products

VendorProductVersionsPlatforms
Mageiaansible2.4.1.0-1.1.mga5 (unaffected), 0 (affected)
Mageiaansible0 (affected), 2.4.1.0-1.1.mga6 (unaffected)

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›