Search for packages
| purl | pkg:rpm/redhat/ansible@2.8.7-1?arch=el7ae |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-uhg5-zpzt-e3gz
Aliases: CVE-2019-14864 GHSA-3m93-m4q6-mc6v PYSEC-2020-160 |
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:15:22.136296+00:00 | RedHat Importer | Affected by | VCID-uhg5-zpzt-e3gz | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14864.json | 38.0.0 |