Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-14332

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j667-c2hm-f2wp

Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.

gitlab/pypi/ansible/CVE-2020-14332

Inclusion of Sensitive Information in Log Files A flaw was found in the Ansible Engine when using `module_args`. Tasks executed with check mode (`--check-mode`) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.