ID CVE-2018-16859
Summary Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:ansible_engine:0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.01:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.01:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:1.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:1.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.4:rc4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.4:rc4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.5:rc5:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.5:rc5:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.4:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.4:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.3:beta3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.3:beta3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.4:beta4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.4:beta4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3-0.3:beta3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3-0.3:beta3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.5:rc:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.5:rc:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.6:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.6:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4-0.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4-0.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0-0.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0-0.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0-0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0-0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.6.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.6.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:alpha_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:alpha_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.17:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 03-04-2019 - 09:29)
Impact:
Exploitability:
CWE CWE-532
CAPEC
  • Fuzzing and observing application log data/errors for application mapping
    An attacker sends random, malformed, or otherwise unexpected messages to a target application and observes the application's log or error messages returned. Fuzzing techniques involve sending random or malformed messages to a target and monitoring the target's response. The attacker does not initially know how a target will respond to individual messages but by attempting a large number of message variants they may find a variant that trigger's desired behavior. In this attack, the purpose of the fuzzing is to observe the application's log and error messages, although fuzzing a target can also sometimes cause the target to enter an unstable state, causing a crash. By observing logs and error messages, the attacker can learn details about the configuration of the target application and might be able to cause the target to disclose sensitive information.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
redhat via4
advisories
  • rhsa
    id RHSA-2018:3770
  • rhsa
    id RHSA-2018:3771
  • rhsa
    id RHSA-2018:3772
  • rhsa
    id RHSA-2018:3773
rpms
  • ansible-0:2.5.13-1.el7ae
  • ansible-doc-0:2.5.13-1.el7ae
  • ansible-0:2.6.10-1.el7ae
  • ansible-0:2.7.4-1.el7ae
  • ansible-0:2.7.4-1.el7ae
refmap via4
bid 106004
confirm
suse
  • openSUSE-SU-2019:1125
  • openSUSE-SU-2019:1635
  • openSUSE-SU-2019:1858
Last major update 03-04-2019 - 09:29
Published 29-11-2018 - 18:29
Last modified 03-04-2019 - 09:29
Back to Top