vulnerability

Alpine Linux: CVE-2019-10156: Exposure of Sensitive Information to an Unauthorized Actor

Severity
5
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:N)
Published
Jul 30, 2019
Added
Dec 12, 2019
Modified
Dec 22, 2025

Description

A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.

Solutions

alpine-linux-upgrade-ansiblealpine-linux-upgrade-ansible-base
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.