ID CVE-2019-14858
Summary A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.4:rc4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.4:rc4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.5:rc5:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-0.5:rc5:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.0.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.0.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.4:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-0.4:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.1.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.1.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.3:beta3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.3:beta3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.4:beta4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.4:beta4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.2.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.2.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3-0.3:beta3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3-0.3:beta3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.5:rc:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.5:rc:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.6:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-0.6:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.3.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.3.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4-0.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4-0.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4-0.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4-0.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0-0.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0-0.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.4.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.4.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0-0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0-0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.5.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.5.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.4.6.0-1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.4.6.0-1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:alpha_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:alpha_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:beta_2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.14:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.14:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.5.15:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.5.15:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:alpha_2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.14:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.14:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.6.19:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.6.19:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.7.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.7.17:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_engine:2.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_engine:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.0:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 24-10-2019 - 23:15)
Impact:
Exploitability:
CWE CWE-532
CAPEC
  • Fuzzing and observing application log data/errors for application mapping
    An attacker sends random, malformed, or otherwise unexpected messages to a target application and observes the application's log or error messages returned. Fuzzing techniques involve sending random or malformed messages to a target and monitoring the target's response. The attacker does not initially know how a target will respond to individual messages but by attempting a large number of message variants they may find a variant that trigger's desired behavior. In this attack, the purpose of the fuzzing is to observe the application's log and error messages, although fuzzing a target can also sometimes cause the target to enter an unstable state, causing a crash. By observing logs and error messages, the attacker can learn details about the configuration of the target application and might be able to cause the target to disclose sensitive information.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
redhat via4
advisories
  • rhsa
    id RHSA-2019:3201
  • rhsa
    id RHSA-2019:3202
  • rhsa
    id RHSA-2019:3203
  • rhsa
    id RHSA-2019:3207
  • rhsa
    id RHSA-2020:0756
rpms
  • ansible-0:2.6.20-1.el7ae
  • ansible-0:2.7.14-1.el7ae
  • ansible-0:2.8.6-1.el7ae
  • ansible-0:2.8.6-1.el8ae
  • ansible-0:2.8.6-1.el7ae
  • ansible-0:2.8.6-1.el8ae
  • ansible-0:2.6.20-1.el7ae
refmap via4
confirm https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858
suse
  • openSUSE-SU-2020:0513
  • openSUSE-SU-2020:0523
Last major update 24-10-2019 - 23:15
Published 14-10-2019 - 15:15
Last modified 24-10-2019 - 23:15
Back to Top