CVE-2018-16876CWE-200

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible…

Low · published January 3, 2019

CVSS v3.0
3.1
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02483 · 84.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-01-03T15:00Z
EPSS history
Timeline
  • 03 JAN 15:00Z
    ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible…
    cvelistv5