Most recent entries from all

Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:10:45 +0000 CVE-2017-7550 https://vulnerability.circl.lu/vuln/cve-2017-7550 <p><strong>Affected:</strong> Red Hat, Inc. ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> <p><strong>Affected:</strong> Red Hat, Inc. ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> https://vulnerability.circl.lu/vuln/cve-2017-7550 GHSA-588w-w6mv-3cw5 — Ansible Insertion of Sensitive Information into Log File vulnerability https://vulnerability.circl.lu/vuln/ghsa-588w-w6mv-3cw5 <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> https://vulnerability.circl.lu/vuln/ghsa-588w-w6mv-3cw5 PYSEC-2017-4 https://vulnerability.circl.lu/vuln/pysec-2017-4 <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.</p> https://vulnerability.circl.lu/vuln/pysec-2017-4