Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-14864

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3m93-m4q6-mc6v

Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.

gitlab/pypi/ansible/CVE-2019-14864

Improper Output Neutralization for Logs Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data.