Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-7uu9-tj6b-quf6
SummaryA flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setting no_log to True. Any sensitive data managed by that function would be leak as an output when running ansible playbooks.
Aliases
0
alias PYSEC-2019-73
Fixed_packages
0
url pkg:pypi/ansible@2.8.4
purl pkg:pypi/ansible@2.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvf-k192-9fca
1
vulnerability VCID-682j-e2pu-1uee
2
vulnerability VCID-a49n-tvnt-p3df
3
vulnerability VCID-ae1r-yq1g-rkem
4
vulnerability VCID-atun-stks-4kcb
5
vulnerability VCID-axc3-wcsk-q3eg
6
vulnerability VCID-b8zs-br97-57av
7
vulnerability VCID-c1xg-s3kx-gkft
8
vulnerability VCID-ckt2-us5z-pyef
9
vulnerability VCID-d4ka-dk4p-kfhb
10
vulnerability VCID-d7ez-s7qb-p3ay
11
vulnerability VCID-dagf-buer-4ffr
12
vulnerability VCID-dzdx-wae5-8ydy
13
vulnerability VCID-e3z2-ydhb-gqfg
14
vulnerability VCID-ezaq-tqd3-4yd1
15
vulnerability VCID-ezux-6buh-h7h7
16
vulnerability VCID-fj2p-7wkh-1fhq
17
vulnerability VCID-geaa-6dxx-tbcw
18
vulnerability VCID-h1n3-cmte-eugf
19
vulnerability VCID-hqar-fca3-cbht
20
vulnerability VCID-jnmu-c8dt-5yb6
21
vulnerability VCID-jrxz-b168-7ug4
22
vulnerability VCID-js7k-ptm9-2yh1
23
vulnerability VCID-kb5h-116p-33b4
24
vulnerability VCID-qbdk-hxhg-wbh4
25
vulnerability VCID-rdwq-93d6-c7b4
26
vulnerability VCID-rg5d-st3d-nbah
27
vulnerability VCID-tdp4-h4ht-pqhs
28
vulnerability VCID-uhg5-zpzt-e3gz
29
vulnerability VCID-ujbp-cc1r-wfe9
30
vulnerability VCID-v3h9-1t69-v7a3
31
vulnerability VCID-whyk-3ynn-zyf4
32
vulnerability VCID-x94k-nxyd-27gs
33
vulnerability VCID-xg2f-12w4-yqge
34
vulnerability VCID-xw8r-fn6y-mbhp
35
vulnerability VCID-yeea-n94x-qqch
36
vulnerability VCID-ykxk-6mpc-wkgt
37
vulnerability VCID-yur3-am6j-w7ay
38
vulnerability VCID-zzzs-scbg-bbe9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.4
Affected_packages
0
url pkg:pypi/ansible@2.8.0
purl pkg:pypi/ansible@2.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvf-k192-9fca
1
vulnerability VCID-682j-e2pu-1uee
2
vulnerability VCID-7uu9-tj6b-quf6
3
vulnerability VCID-a49n-tvnt-p3df
4
vulnerability VCID-ae1r-yq1g-rkem
5
vulnerability VCID-atun-stks-4kcb
6
vulnerability VCID-axc3-wcsk-q3eg
7
vulnerability VCID-b8zs-br97-57av
8
vulnerability VCID-c1xg-s3kx-gkft
9
vulnerability VCID-ckt2-us5z-pyef
10
vulnerability VCID-d4ka-dk4p-kfhb
11
vulnerability VCID-d7ez-s7qb-p3ay
12
vulnerability VCID-dagf-buer-4ffr
13
vulnerability VCID-dzdx-wae5-8ydy
14
vulnerability VCID-e3z2-ydhb-gqfg
15
vulnerability VCID-ezaq-tqd3-4yd1
16
vulnerability VCID-ezux-6buh-h7h7
17
vulnerability VCID-fj2p-7wkh-1fhq
18
vulnerability VCID-geaa-6dxx-tbcw
19
vulnerability VCID-h1n3-cmte-eugf
20
vulnerability VCID-hqar-fca3-cbht
21
vulnerability VCID-jnmu-c8dt-5yb6
22
vulnerability VCID-jrxz-b168-7ug4
23
vulnerability VCID-js7k-ptm9-2yh1
24
vulnerability VCID-kb5h-116p-33b4
25
vulnerability VCID-nukv-kkws-xkb1
26
vulnerability VCID-qbdk-hxhg-wbh4
27
vulnerability VCID-r6bb-p28b-8fcn
28
vulnerability VCID-rdwq-93d6-c7b4
29
vulnerability VCID-rg5d-st3d-nbah
30
vulnerability VCID-swpr-3qae-d7fe
31
vulnerability VCID-t6db-buke-nfhf
32
vulnerability VCID-tdp4-h4ht-pqhs
33
vulnerability VCID-uhg5-zpzt-e3gz
34
vulnerability VCID-ujbp-cc1r-wfe9
35
vulnerability VCID-v3h9-1t69-v7a3
36
vulnerability VCID-whyk-3ynn-zyf4
37
vulnerability VCID-x5e2-7whc-v3fc
38
vulnerability VCID-x94k-nxyd-27gs
39
vulnerability VCID-xg2f-12w4-yqge
40
vulnerability VCID-xw8r-fn6y-mbhp
41
vulnerability VCID-yeea-n94x-qqch
42
vulnerability VCID-ykxk-6mpc-wkgt
43
vulnerability VCID-yur3-am6j-w7ay
44
vulnerability VCID-zzzs-scbg-bbe9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0
1
url pkg:pypi/ansible@2.8.1
purl pkg:pypi/ansible@2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvf-k192-9fca
1
vulnerability VCID-682j-e2pu-1uee
2
vulnerability VCID-7uu9-tj6b-quf6
3
vulnerability VCID-a49n-tvnt-p3df
4
vulnerability VCID-ae1r-yq1g-rkem
5
vulnerability VCID-atun-stks-4kcb
6
vulnerability VCID-axc3-wcsk-q3eg
7
vulnerability VCID-b8zs-br97-57av
8
vulnerability VCID-c1xg-s3kx-gkft
9
vulnerability VCID-ckt2-us5z-pyef
10
vulnerability VCID-d4ka-dk4p-kfhb
11
vulnerability VCID-d7ez-s7qb-p3ay
12
vulnerability VCID-dagf-buer-4ffr
13
vulnerability VCID-dzdx-wae5-8ydy
14
vulnerability VCID-e3z2-ydhb-gqfg
15
vulnerability VCID-ezaq-tqd3-4yd1
16
vulnerability VCID-ezux-6buh-h7h7
17
vulnerability VCID-fj2p-7wkh-1fhq
18
vulnerability VCID-geaa-6dxx-tbcw
19
vulnerability VCID-h1n3-cmte-eugf
20
vulnerability VCID-hqar-fca3-cbht
21
vulnerability VCID-jnmu-c8dt-5yb6
22
vulnerability VCID-jrxz-b168-7ug4
23
vulnerability VCID-js7k-ptm9-2yh1
24
vulnerability VCID-kb5h-116p-33b4
25
vulnerability VCID-nukv-kkws-xkb1
26
vulnerability VCID-qbdk-hxhg-wbh4
27
vulnerability VCID-rdwq-93d6-c7b4
28
vulnerability VCID-rg5d-st3d-nbah
29
vulnerability VCID-swpr-3qae-d7fe
30
vulnerability VCID-t6db-buke-nfhf
31
vulnerability VCID-tdp4-h4ht-pqhs
32
vulnerability VCID-uhg5-zpzt-e3gz
33
vulnerability VCID-ujbp-cc1r-wfe9
34
vulnerability VCID-v3h9-1t69-v7a3
35
vulnerability VCID-whyk-3ynn-zyf4
36
vulnerability VCID-x5e2-7whc-v3fc
37
vulnerability VCID-x94k-nxyd-27gs
38
vulnerability VCID-xg2f-12w4-yqge
39
vulnerability VCID-xw8r-fn6y-mbhp
40
vulnerability VCID-yeea-n94x-qqch
41
vulnerability VCID-ykxk-6mpc-wkgt
42
vulnerability VCID-yur3-am6j-w7ay
43
vulnerability VCID-zzzs-scbg-bbe9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1
2
url pkg:pypi/ansible@2.8.2
purl pkg:pypi/ansible@2.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvf-k192-9fca
1
vulnerability VCID-682j-e2pu-1uee
2
vulnerability VCID-7uu9-tj6b-quf6
3
vulnerability VCID-a49n-tvnt-p3df
4
vulnerability VCID-ae1r-yq1g-rkem
5
vulnerability VCID-atun-stks-4kcb
6
vulnerability VCID-axc3-wcsk-q3eg
7
vulnerability VCID-b8zs-br97-57av
8
vulnerability VCID-c1xg-s3kx-gkft
9
vulnerability VCID-ckt2-us5z-pyef
10
vulnerability VCID-d4ka-dk4p-kfhb
11
vulnerability VCID-d7ez-s7qb-p3ay
12
vulnerability VCID-dagf-buer-4ffr
13
vulnerability VCID-dzdx-wae5-8ydy
14
vulnerability VCID-e3z2-ydhb-gqfg
15
vulnerability VCID-ezaq-tqd3-4yd1
16
vulnerability VCID-ezux-6buh-h7h7
17
vulnerability VCID-fj2p-7wkh-1fhq
18
vulnerability VCID-geaa-6dxx-tbcw
19
vulnerability VCID-h1n3-cmte-eugf
20
vulnerability VCID-hqar-fca3-cbht
21
vulnerability VCID-jnmu-c8dt-5yb6
22
vulnerability VCID-jrxz-b168-7ug4
23
vulnerability VCID-js7k-ptm9-2yh1
24
vulnerability VCID-kb5h-116p-33b4
25
vulnerability VCID-nukv-kkws-xkb1
26
vulnerability VCID-qbdk-hxhg-wbh4
27
vulnerability VCID-rdwq-93d6-c7b4
28
vulnerability VCID-rg5d-st3d-nbah
29
vulnerability VCID-swpr-3qae-d7fe
30
vulnerability VCID-tdp4-h4ht-pqhs
31
vulnerability VCID-uhg5-zpzt-e3gz
32
vulnerability VCID-ujbp-cc1r-wfe9
33
vulnerability VCID-v3h9-1t69-v7a3
34
vulnerability VCID-whyk-3ynn-zyf4
35
vulnerability VCID-x94k-nxyd-27gs
36
vulnerability VCID-xg2f-12w4-yqge
37
vulnerability VCID-xw8r-fn6y-mbhp
38
vulnerability VCID-yeea-n94x-qqch
39
vulnerability VCID-ykxk-6mpc-wkgt
40
vulnerability VCID-yur3-am6j-w7ay
41
vulnerability VCID-zzzs-scbg-bbe9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2
3
url pkg:pypi/ansible@2.8.3
purl pkg:pypi/ansible@2.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4yvf-k192-9fca
1
vulnerability VCID-682j-e2pu-1uee
2
vulnerability VCID-7uu9-tj6b-quf6
3
vulnerability VCID-a49n-tvnt-p3df
4
vulnerability VCID-ae1r-yq1g-rkem
5
vulnerability VCID-atun-stks-4kcb
6
vulnerability VCID-axc3-wcsk-q3eg
7
vulnerability VCID-b8zs-br97-57av
8
vulnerability VCID-c1xg-s3kx-gkft
9
vulnerability VCID-ckt2-us5z-pyef
10
vulnerability VCID-d4ka-dk4p-kfhb
11
vulnerability VCID-d7ez-s7qb-p3ay
12
vulnerability VCID-dagf-buer-4ffr
13
vulnerability VCID-dzdx-wae5-8ydy
14
vulnerability VCID-e3z2-ydhb-gqfg
15
vulnerability VCID-ezaq-tqd3-4yd1
16
vulnerability VCID-ezux-6buh-h7h7
17
vulnerability VCID-fj2p-7wkh-1fhq
18
vulnerability VCID-geaa-6dxx-tbcw
19
vulnerability VCID-h1n3-cmte-eugf
20
vulnerability VCID-hqar-fca3-cbht
21
vulnerability VCID-jnmu-c8dt-5yb6
22
vulnerability VCID-jrxz-b168-7ug4
23
vulnerability VCID-js7k-ptm9-2yh1
24
vulnerability VCID-kb5h-116p-33b4
25
vulnerability VCID-nukv-kkws-xkb1
26
vulnerability VCID-qbdk-hxhg-wbh4
27
vulnerability VCID-rdwq-93d6-c7b4
28
vulnerability VCID-rg5d-st3d-nbah
29
vulnerability VCID-swpr-3qae-d7fe
30
vulnerability VCID-tdp4-h4ht-pqhs
31
vulnerability VCID-uhg5-zpzt-e3gz
32
vulnerability VCID-ujbp-cc1r-wfe9
33
vulnerability VCID-v3h9-1t69-v7a3
34
vulnerability VCID-whyk-3ynn-zyf4
35
vulnerability VCID-x94k-nxyd-27gs
36
vulnerability VCID-xg2f-12w4-yqge
37
vulnerability VCID-xw8r-fn6y-mbhp
38
vulnerability VCID-yeea-n94x-qqch
39
vulnerability VCID-ykxk-6mpc-wkgt
40
vulnerability VCID-yur3-am6j-w7ay
41
vulnerability VCID-zzzs-scbg-bbe9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.3
References
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217
3
reference_url https://github.com/ansible/ansible/issues/56269
reference_id
reference_type
scores
url https://github.com/ansible/ansible/issues/56269
4
reference_url https://github.com/ansible/ansible/pull/59427
reference_id
reference_type
scores
url https://github.com/ansible/ansible/pull/59427
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-7uu9-tj6b-quf6