GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/90390?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90390?format=api",
    "vulnerability_id": "VCID-7uu9-tj6b-quf6",
    "summary": "A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setting no_log to True. Any sensitive data managed by that function would be leak as an output when running ansible playbooks.",
    "aliases": [
        {
            "alias": "PYSEC-2019-73"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/9394?format=api",
            "purl": "pkg:pypi/ansible@2.8.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4yvf-k192-9fca"
                },
                {
                    "vulnerability": "VCID-682j-e2pu-1uee"
                },
                {
                    "vulnerability": "VCID-a49n-tvnt-p3df"
                },
                {
                    "vulnerability": "VCID-ae1r-yq1g-rkem"
                },
                {
                    "vulnerability": "VCID-atun-stks-4kcb"
                },
                {
                    "vulnerability": "VCID-axc3-wcsk-q3eg"
                },
                {
                    "vulnerability": "VCID-b8zs-br97-57av"
                },
                {
                    "vulnerability": "VCID-c1xg-s3kx-gkft"
                },
                {
                    "vulnerability": "VCID-ckt2-us5z-pyef"
                },
                {
                    "vulnerability": "VCID-d4ka-dk4p-kfhb"
                },
                {
                    "vulnerability": "VCID-d7ez-s7qb-p3ay"
                },
                {
                    "vulnerability": "VCID-dagf-buer-4ffr"
                },
                {
                    "vulnerability": "VCID-dzdx-wae5-8ydy"
                },
                {
                    "vulnerability": "VCID-e3z2-ydhb-gqfg"
                },
                {
                    "vulnerability": "VCID-ezaq-tqd3-4yd1"
                },
                {
                    "vulnerability": "VCID-ezux-6buh-h7h7"
                },
                {
                    "vulnerability": "VCID-fj2p-7wkh-1fhq"
                },
                {
                    "vulnerability": "VCID-geaa-6dxx-tbcw"
                },
                {
                    "vulnerability": "VCID-h1n3-cmte-eugf"
                },
                {
                    "vulnerability": "VCID-hqar-fca3-cbht"
                },
                {
                    "vulnerability": "VCID-jnmu-c8dt-5yb6"
                },
                {
                    "vulnerability": "VCID-jrxz-b168-7ug4"
                },
                {
                    "vulnerability": "VCID-js7k-ptm9-2yh1"
                },
                {
                    "vulnerability": "VCID-kb5h-116p-33b4"
                },
                {
                    "vulnerability": "VCID-qbdk-hxhg-wbh4"
                },
                {
                    "vulnerability": "VCID-rdwq-93d6-c7b4"
                },
                {
                    "vulnerability": "VCID-rg5d-st3d-nbah"
                },
                {
                    "vulnerability": "VCID-tdp4-h4ht-pqhs"
                },
                {
                    "vulnerability": "VCID-uhg5-zpzt-e3gz"
                },
                {
                    "vulnerability": "VCID-ujbp-cc1r-wfe9"
                },
                {
                    "vulnerability": "VCID-v3h9-1t69-v7a3"
                },
                {
                    "vulnerability": "VCID-whyk-3ynn-zyf4"
                },
                {
                    "vulnerability": "VCID-x94k-nxyd-27gs"
                },
                {
                    "vulnerability": "VCID-xg2f-12w4-yqge"
                },
                {
                    "vulnerability": "VCID-xw8r-fn6y-mbhp"
                },
                {
                    "vulnerability": "VCID-yeea-n94x-qqch"
                },
                {
                    "vulnerability": "VCID-ykxk-6mpc-wkgt"
                },
                {
                    "vulnerability": "VCID-yur3-am6j-w7ay"
                },
                {
                    "vulnerability": "VCID-zzzs-scbg-bbe9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.4"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7577?format=api",
            "purl": "pkg:pypi/ansible@2.8.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4yvf-k192-9fca"
                },
                {
                    "vulnerability": "VCID-682j-e2pu-1uee"
                },
                {
                    "vulnerability": "VCID-7uu9-tj6b-quf6"
                },
                {
                    "vulnerability": "VCID-a49n-tvnt-p3df"
                },
                {
                    "vulnerability": "VCID-ae1r-yq1g-rkem"
                },
                {
                    "vulnerability": "VCID-atun-stks-4kcb"
                },
                {
                    "vulnerability": "VCID-axc3-wcsk-q3eg"
                },
                {
                    "vulnerability": "VCID-b8zs-br97-57av"
                },
                {
                    "vulnerability": "VCID-c1xg-s3kx-gkft"
                },
                {
                    "vulnerability": "VCID-ckt2-us5z-pyef"
                },
                {
                    "vulnerability": "VCID-d4ka-dk4p-kfhb"
                },
                {
                    "vulnerability": "VCID-d7ez-s7qb-p3ay"
                },
                {
                    "vulnerability": "VCID-dagf-buer-4ffr"
                },
                {
                    "vulnerability": "VCID-dzdx-wae5-8ydy"
                },
                {
                    "vulnerability": "VCID-e3z2-ydhb-gqfg"
                },
                {
                    "vulnerability": "VCID-ezaq-tqd3-4yd1"
                },
                {
                    "vulnerability": "VCID-ezux-6buh-h7h7"
                },
                {
                    "vulnerability": "VCID-fj2p-7wkh-1fhq"
                },
                {
                    "vulnerability": "VCID-geaa-6dxx-tbcw"
                },
                {
                    "vulnerability": "VCID-h1n3-cmte-eugf"
                },
                {
                    "vulnerability": "VCID-hqar-fca3-cbht"
                },
                {
                    "vulnerability": "VCID-jnmu-c8dt-5yb6"
                },
                {
                    "vulnerability": "VCID-jrxz-b168-7ug4"
                },
                {
                    "vulnerability": "VCID-js7k-ptm9-2yh1"
                },
                {
                    "vulnerability": "VCID-kb5h-116p-33b4"
                },
                {
                    "vulnerability": "VCID-nukv-kkws-xkb1"
                },
                {
                    "vulnerability": "VCID-qbdk-hxhg-wbh4"
                },
                {
                    "vulnerability": "VCID-r6bb-p28b-8fcn"
                },
                {
                    "vulnerability": "VCID-rdwq-93d6-c7b4"
                },
                {
                    "vulnerability": "VCID-rg5d-st3d-nbah"
                },
                {
                    "vulnerability": "VCID-swpr-3qae-d7fe"
                },
                {
                    "vulnerability": "VCID-t6db-buke-nfhf"
                },
                {
                    "vulnerability": "VCID-tdp4-h4ht-pqhs"
                },
                {
                    "vulnerability": "VCID-uhg5-zpzt-e3gz"
                },
                {
                    "vulnerability": "VCID-ujbp-cc1r-wfe9"
                },
                {
                    "vulnerability": "VCID-v3h9-1t69-v7a3"
                },
                {
                    "vulnerability": "VCID-whyk-3ynn-zyf4"
                },
                {
                    "vulnerability": "VCID-x5e2-7whc-v3fc"
                },
                {
                    "vulnerability": "VCID-x94k-nxyd-27gs"
                },
                {
                    "vulnerability": "VCID-xg2f-12w4-yqge"
                },
                {
                    "vulnerability": "VCID-xw8r-fn6y-mbhp"
                },
                {
                    "vulnerability": "VCID-yeea-n94x-qqch"
                },
                {
                    "vulnerability": "VCID-ykxk-6mpc-wkgt"
                },
                {
                    "vulnerability": "VCID-yur3-am6j-w7ay"
                },
                {
                    "vulnerability": "VCID-zzzs-scbg-bbe9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7579?format=api",
            "purl": "pkg:pypi/ansible@2.8.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4yvf-k192-9fca"
                },
                {
                    "vulnerability": "VCID-682j-e2pu-1uee"
                },
                {
                    "vulnerability": "VCID-7uu9-tj6b-quf6"
                },
                {
                    "vulnerability": "VCID-a49n-tvnt-p3df"
                },
                {
                    "vulnerability": "VCID-ae1r-yq1g-rkem"
                },
                {
                    "vulnerability": "VCID-atun-stks-4kcb"
                },
                {
                    "vulnerability": "VCID-axc3-wcsk-q3eg"
                },
                {
                    "vulnerability": "VCID-b8zs-br97-57av"
                },
                {
                    "vulnerability": "VCID-c1xg-s3kx-gkft"
                },
                {
                    "vulnerability": "VCID-ckt2-us5z-pyef"
                },
                {
                    "vulnerability": "VCID-d4ka-dk4p-kfhb"
                },
                {
                    "vulnerability": "VCID-d7ez-s7qb-p3ay"
                },
                {
                    "vulnerability": "VCID-dagf-buer-4ffr"
                },
                {
                    "vulnerability": "VCID-dzdx-wae5-8ydy"
                },
                {
                    "vulnerability": "VCID-e3z2-ydhb-gqfg"
                },
                {
                    "vulnerability": "VCID-ezaq-tqd3-4yd1"
                },
                {
                    "vulnerability": "VCID-ezux-6buh-h7h7"
                },
                {
                    "vulnerability": "VCID-fj2p-7wkh-1fhq"
                },
                {
                    "vulnerability": "VCID-geaa-6dxx-tbcw"
                },
                {
                    "vulnerability": "VCID-h1n3-cmte-eugf"
                },
                {
                    "vulnerability": "VCID-hqar-fca3-cbht"
                },
                {
                    "vulnerability": "VCID-jnmu-c8dt-5yb6"
                },
                {
                    "vulnerability": "VCID-jrxz-b168-7ug4"
                },
                {
                    "vulnerability": "VCID-js7k-ptm9-2yh1"
                },
                {
                    "vulnerability": "VCID-kb5h-116p-33b4"
                },
                {
                    "vulnerability": "VCID-nukv-kkws-xkb1"
                },
                {
                    "vulnerability": "VCID-qbdk-hxhg-wbh4"
                },
                {
                    "vulnerability": "VCID-rdwq-93d6-c7b4"
                },
                {
                    "vulnerability": "VCID-rg5d-st3d-nbah"
                },
                {
                    "vulnerability": "VCID-swpr-3qae-d7fe"
                },
                {
                    "vulnerability": "VCID-t6db-buke-nfhf"
                },
                {
                    "vulnerability": "VCID-tdp4-h4ht-pqhs"
                },
                {
                    "vulnerability": "VCID-uhg5-zpzt-e3gz"
                },
                {
                    "vulnerability": "VCID-ujbp-cc1r-wfe9"
                },
                {
                    "vulnerability": "VCID-v3h9-1t69-v7a3"
                },
                {
                    "vulnerability": "VCID-whyk-3ynn-zyf4"
                },
                {
                    "vulnerability": "VCID-x5e2-7whc-v3fc"
                },
                {
                    "vulnerability": "VCID-x94k-nxyd-27gs"
                },
                {
                    "vulnerability": "VCID-xg2f-12w4-yqge"
                },
                {
                    "vulnerability": "VCID-xw8r-fn6y-mbhp"
                },
                {
                    "vulnerability": "VCID-yeea-n94x-qqch"
                },
                {
                    "vulnerability": "VCID-ykxk-6mpc-wkgt"
                },
                {
                    "vulnerability": "VCID-yur3-am6j-w7ay"
                },
                {
                    "vulnerability": "VCID-zzzs-scbg-bbe9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/8971?format=api",
            "purl": "pkg:pypi/ansible@2.8.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4yvf-k192-9fca"
                },
                {
                    "vulnerability": "VCID-682j-e2pu-1uee"
                },
                {
                    "vulnerability": "VCID-7uu9-tj6b-quf6"
                },
                {
                    "vulnerability": "VCID-a49n-tvnt-p3df"
                },
                {
                    "vulnerability": "VCID-ae1r-yq1g-rkem"
                },
                {
                    "vulnerability": "VCID-atun-stks-4kcb"
                },
                {
                    "vulnerability": "VCID-axc3-wcsk-q3eg"
                },
                {
                    "vulnerability": "VCID-b8zs-br97-57av"
                },
                {
                    "vulnerability": "VCID-c1xg-s3kx-gkft"
                },
                {
                    "vulnerability": "VCID-ckt2-us5z-pyef"
                },
                {
                    "vulnerability": "VCID-d4ka-dk4p-kfhb"
                },
                {
                    "vulnerability": "VCID-d7ez-s7qb-p3ay"
                },
                {
                    "vulnerability": "VCID-dagf-buer-4ffr"
                },
                {
                    "vulnerability": "VCID-dzdx-wae5-8ydy"
                },
                {
                    "vulnerability": "VCID-e3z2-ydhb-gqfg"
                },
                {
                    "vulnerability": "VCID-ezaq-tqd3-4yd1"
                },
                {
                    "vulnerability": "VCID-ezux-6buh-h7h7"
                },
                {
                    "vulnerability": "VCID-fj2p-7wkh-1fhq"
                },
                {
                    "vulnerability": "VCID-geaa-6dxx-tbcw"
                },
                {
                    "vulnerability": "VCID-h1n3-cmte-eugf"
                },
                {
                    "vulnerability": "VCID-hqar-fca3-cbht"
                },
                {
                    "vulnerability": "VCID-jnmu-c8dt-5yb6"
                },
                {
                    "vulnerability": "VCID-jrxz-b168-7ug4"
                },
                {
                    "vulnerability": "VCID-js7k-ptm9-2yh1"
                },
                {
                    "vulnerability": "VCID-kb5h-116p-33b4"
                },
                {
                    "vulnerability": "VCID-nukv-kkws-xkb1"
                },
                {
                    "vulnerability": "VCID-qbdk-hxhg-wbh4"
                },
                {
                    "vulnerability": "VCID-rdwq-93d6-c7b4"
                },
                {
                    "vulnerability": "VCID-rg5d-st3d-nbah"
                },
                {
                    "vulnerability": "VCID-swpr-3qae-d7fe"
                },
                {
                    "vulnerability": "VCID-tdp4-h4ht-pqhs"
                },
                {
                    "vulnerability": "VCID-uhg5-zpzt-e3gz"
                },
                {
                    "vulnerability": "VCID-ujbp-cc1r-wfe9"
                },
                {
                    "vulnerability": "VCID-v3h9-1t69-v7a3"
                },
                {
                    "vulnerability": "VCID-whyk-3ynn-zyf4"
                },
                {
                    "vulnerability": "VCID-x94k-nxyd-27gs"
                },
                {
                    "vulnerability": "VCID-xg2f-12w4-yqge"
                },
                {
                    "vulnerability": "VCID-xw8r-fn6y-mbhp"
                },
                {
                    "vulnerability": "VCID-yeea-n94x-qqch"
                },
                {
                    "vulnerability": "VCID-ykxk-6mpc-wkgt"
                },
                {
                    "vulnerability": "VCID-yur3-am6j-w7ay"
                },
                {
                    "vulnerability": "VCID-zzzs-scbg-bbe9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/9393?format=api",
            "purl": "pkg:pypi/ansible@2.8.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4yvf-k192-9fca"
                },
                {
                    "vulnerability": "VCID-682j-e2pu-1uee"
                },
                {
                    "vulnerability": "VCID-7uu9-tj6b-quf6"
                },
                {
                    "vulnerability": "VCID-a49n-tvnt-p3df"
                },
                {
                    "vulnerability": "VCID-ae1r-yq1g-rkem"
                },
                {
                    "vulnerability": "VCID-atun-stks-4kcb"
                },
                {
                    "vulnerability": "VCID-axc3-wcsk-q3eg"
                },
                {
                    "vulnerability": "VCID-b8zs-br97-57av"
                },
                {
                    "vulnerability": "VCID-c1xg-s3kx-gkft"
                },
                {
                    "vulnerability": "VCID-ckt2-us5z-pyef"
                },
                {
                    "vulnerability": "VCID-d4ka-dk4p-kfhb"
                },
                {
                    "vulnerability": "VCID-d7ez-s7qb-p3ay"
                },
                {
                    "vulnerability": "VCID-dagf-buer-4ffr"
                },
                {
                    "vulnerability": "VCID-dzdx-wae5-8ydy"
                },
                {
                    "vulnerability": "VCID-e3z2-ydhb-gqfg"
                },
                {
                    "vulnerability": "VCID-ezaq-tqd3-4yd1"
                },
                {
                    "vulnerability": "VCID-ezux-6buh-h7h7"
                },
                {
                    "vulnerability": "VCID-fj2p-7wkh-1fhq"
                },
                {
                    "vulnerability": "VCID-geaa-6dxx-tbcw"
                },
                {
                    "vulnerability": "VCID-h1n3-cmte-eugf"
                },
                {
                    "vulnerability": "VCID-hqar-fca3-cbht"
                },
                {
                    "vulnerability": "VCID-jnmu-c8dt-5yb6"
                },
                {
                    "vulnerability": "VCID-jrxz-b168-7ug4"
                },
                {
                    "vulnerability": "VCID-js7k-ptm9-2yh1"
                },
                {
                    "vulnerability": "VCID-kb5h-116p-33b4"
                },
                {
                    "vulnerability": "VCID-nukv-kkws-xkb1"
                },
                {
                    "vulnerability": "VCID-qbdk-hxhg-wbh4"
                },
                {
                    "vulnerability": "VCID-rdwq-93d6-c7b4"
                },
                {
                    "vulnerability": "VCID-rg5d-st3d-nbah"
                },
                {
                    "vulnerability": "VCID-swpr-3qae-d7fe"
                },
                {
                    "vulnerability": "VCID-tdp4-h4ht-pqhs"
                },
                {
                    "vulnerability": "VCID-uhg5-zpzt-e3gz"
                },
                {
                    "vulnerability": "VCID-ujbp-cc1r-wfe9"
                },
                {
                    "vulnerability": "VCID-v3h9-1t69-v7a3"
                },
                {
                    "vulnerability": "VCID-whyk-3ynn-zyf4"
                },
                {
                    "vulnerability": "VCID-x94k-nxyd-27gs"
                },
                {
                    "vulnerability": "VCID-xg2f-12w4-yqge"
                },
                {
                    "vulnerability": "VCID-xw8r-fn6y-mbhp"
                },
                {
                    "vulnerability": "VCID-yeea-n94x-qqch"
                },
                {
                    "vulnerability": "VCID-ykxk-6mpc-wkgt"
                },
                {
                    "vulnerability": "VCID-yur3-am6j-w7ay"
                },
                {
                    "vulnerability": "VCID-zzzs-scbg-bbe9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.3"
        }
    ],
    "references": [
        {
            "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html"
        },
        {
            "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217"
        },
        {
            "reference_url": "https://github.com/ansible/ansible/issues/56269",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/ansible/ansible/issues/56269"
        },
        {
            "reference_url": "https://github.com/ansible/ansible/pull/59427",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/ansible/ansible/pull/59427"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": "0.5",
    "weighted_severity": "0.0",
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7uu9-tj6b-quf6"
}