CVE-2017-7550 in Ansibleinfo

Zusammenfassung

von MITRE

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

05.04.2017

Veröffentlichung

21.11.2017

Moderieren

akzeptiert

Eintrag

VDB-109785

CPE

bereit

EPSS

0.00650

KEV

nein

Aktivitäten

very low

Quellen

Want to know what is going to be exploited?

We predict KEV entries!