ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ansible-baseUpgrade ansible | Nov 22, 2019 | Nov 22, 2019 |
| Debian | — | Upgrade ansible | Aug 9, 2021 | Nov 22, 2019 |
| Suse | — | Upgrade ansibleUpgrade ansible-testUpgrade ansible-doc | Apr 15, 2020 | Sep 3, 2019 |
| Ubuntu | — | Upgrade ansible-node-fireball (Ubuntu Pro)Upgrade ansible-fireball (Ubuntu Pro)Upgrade ansible (Ubuntu Pro) | Mar 10, 2025 | Nov 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub