Search for packages
| purl | pkg:rpm/redhat/ansible@2.4.0.0-5?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-c1d7-4rje-ayf9
Aliases: CVE-2017-7550 GHSA-588w-w6mv-3cw5 PYSEC-2017-4 |
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:28:34.583817+00:00 | RedHat Importer | Affected by | VCID-c1d7-4rje-ayf9 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7550.json | 38.0.0 |