{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/90390?format=json","vulnerability_id":"VCID-7uu9-tj6b-quf6","summary":"A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setting no_log to True. Any sensitive data managed by that function would be leak as an output when running ansible playbooks.","aliases":[{"alias":"PYSEC-2019-73"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/9394?format=json","purl":"pkg:pypi/ansible@2.8.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4yvf-k192-9fca"},{"vulnerability":"VCID-682j-e2pu-1uee"},{"vulnerability":"VCID-a49n-tvnt-p3df"},{"vulnerability":"VCID-ae1r-yq1g-rkem"},{"vulnerability":"VCID-atun-stks-4kcb"},{"vulnerability":"VCID-axc3-wcsk-q3eg"},{"vulnerability":"VCID-b8zs-br97-57av"},{"vulnerability":"VCID-c1xg-s3kx-gkft"},{"vulnerability":"VCID-ckt2-us5z-pyef"},{"vulnerability":"VCID-d4ka-dk4p-kfhb"},{"vulnerability":"VCID-d7ez-s7qb-p3ay"},{"vulnerability":"VCID-dagf-buer-4ffr"},{"vulnerability":"VCID-dzdx-wae5-8ydy"},{"vulnerability":"VCID-e3z2-ydhb-gqfg"},{"vulnerability":"VCID-ezaq-tqd3-4yd1"},{"vulnerability":"VCID-ezux-6buh-h7h7"},{"vulnerability":"VCID-fj2p-7wkh-1fhq"},{"vulnerability":"VCID-geaa-6dxx-tbcw"},{"vulnerability":"VCID-h1n3-cmte-eugf"},{"vulnerability":"VCID-hqar-fca3-cbht"},{"vulnerability":"VCID-jnmu-c8dt-5yb6"},{"vulnerability":"VCID-jrxz-b168-7ug4"},{"vulnerability":"VCID-js7k-ptm9-2yh1"},{"vulnerability":"VCID-kb5h-116p-33b4"},{"vulnerability":"VCID-qbdk-hxhg-wbh4"},{"vulnerability":"VCID-rdwq-93d6-c7b4"},{"vulnerability":"VCID-rg5d-st3d-nbah"},{"vulnerability":"VCID-tdp4-h4ht-pqhs"},{"vulnerability":"VCID-uhg5-zpzt-e3gz"},{"vulnerability":"VCID-ujbp-cc1r-wfe9"},{"vulnerability":"VCID-v3h9-1t69-v7a3"},{"vulnerability":"VCID-whyk-3ynn-zyf4"},{"vulnerability":"VCID-x94k-nxyd-27gs"},{"vulnerability":"VCID-xg2f-12w4-yqge"},{"vulnerability":"VCID-xw8r-fn6y-mbhp"},{"vulnerability":"VCID-yeea-n94x-qqch"},{"vulnerability":"VCID-ykxk-6mpc-wkgt"},{"vulnerability":"VCID-yur3-am6j-w7ay"},{"vulnerability":"VCID-zzzs-scbg-bbe9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.4"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/7577?format=json","purl":"pkg:pypi/ansible@2.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4yvf-k192-9fca"},{"vulnerability":"VCID-682j-e2pu-1uee"},{"vulnerability":"VCID-7uu9-tj6b-quf6"},{"vulnerability":"VCID-a49n-tvnt-p3df"},{"vulnerability":"VCID-ae1r-yq1g-rkem"},{"vulnerability":"VCID-atun-stks-4kcb"},{"vulnerability":"VCID-axc3-wcsk-q3eg"},{"vulnerability":"VCID-b8zs-br97-57av"},{"vulnerability":"VCID-c1xg-s3kx-gkft"},{"vulnerability":"VCID-ckt2-us5z-pyef"},{"vulnerability":"VCID-d4ka-dk4p-kfhb"},{"vulnerability":"VCID-d7ez-s7qb-p3ay"},{"vulnerability":"VCID-dagf-buer-4ffr"},{"vulnerability":"VCID-dzdx-wae5-8ydy"},{"vulnerability":"VCID-e3z2-ydhb-gqfg"},{"vulnerability":"VCID-ezaq-tqd3-4yd1"},{"vulnerability":"VCID-ezux-6buh-h7h7"},{"vulnerability":"VCID-fj2p-7wkh-1fhq"},{"vulnerability":"VCID-geaa-6dxx-tbcw"},{"vulnerability":"VCID-h1n3-cmte-eugf"},{"vulnerability":"VCID-hqar-fca3-cbht"},{"vulnerability":"VCID-jnmu-c8dt-5yb6"},{"vulnerability":"VCID-jrxz-b168-7ug4"},{"vulnerability":"VCID-js7k-ptm9-2yh1"},{"vulnerability":"VCID-kb5h-116p-33b4"},{"vulnerability":"VCID-nukv-kkws-xkb1"},{"vulnerability":"VCID-qbdk-hxhg-wbh4"},{"vulnerability":"VCID-r6bb-p28b-8fcn"},{"vulnerability":"VCID-rdwq-93d6-c7b4"},{"vulnerability":"VCID-rg5d-st3d-nbah"},{"vulnerability":"VCID-swpr-3qae-d7fe"},{"vulnerability":"VCID-t6db-buke-nfhf"},{"vulnerability":"VCID-tdp4-h4ht-pqhs"},{"vulnerability":"VCID-uhg5-zpzt-e3gz"},{"vulnerability":"VCID-ujbp-cc1r-wfe9"},{"vulnerability":"VCID-v3h9-1t69-v7a3"},{"vulnerability":"VCID-whyk-3ynn-zyf4"},{"vulnerability":"VCID-x5e2-7whc-v3fc"},{"vulnerability":"VCID-x94k-nxyd-27gs"},{"vulnerability":"VCID-xg2f-12w4-yqge"},{"vulnerability":"VCID-xw8r-fn6y-mbhp"},{"vulnerability":"VCID-yeea-n94x-qqch"},{"vulnerability":"VCID-ykxk-6mpc-wkgt"},{"vulnerability":"VCID-yur3-am6j-w7ay"},{"vulnerability":"VCID-zzzs-scbg-bbe9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/7579?format=json","purl":"pkg:pypi/ansible@2.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4yvf-k192-9fca"},{"vulnerability":"VCID-682j-e2pu-1uee"},{"vulnerability":"VCID-7uu9-tj6b-quf6"},{"vulnerability":"VCID-a49n-tvnt-p3df"},{"vulnerability":"VCID-ae1r-yq1g-rkem"},{"vulnerability":"VCID-atun-stks-4kcb"},{"vulnerability":"VCID-axc3-wcsk-q3eg"},{"vulnerability":"VCID-b8zs-br97-57av"},{"vulnerability":"VCID-c1xg-s3kx-gkft"},{"vulnerability":"VCID-ckt2-us5z-pyef"},{"vulnerability":"VCID-d4ka-dk4p-kfhb"},{"vulnerability":"VCID-d7ez-s7qb-p3ay"},{"vulnerability":"VCID-dagf-buer-4ffr"},{"vulnerability":"VCID-dzdx-wae5-8ydy"},{"vulnerability":"VCID-e3z2-ydhb-gqfg"},{"vulnerability":"VCID-ezaq-tqd3-4yd1"},{"vulnerability":"VCID-ezux-6buh-h7h7"},{"vulnerability":"VCID-fj2p-7wkh-1fhq"},{"vulnerability":"VCID-geaa-6dxx-tbcw"},{"vulnerability":"VCID-h1n3-cmte-eugf"},{"vulnerability":"VCID-hqar-fca3-cbht"},{"vulnerability":"VCID-jnmu-c8dt-5yb6"},{"vulnerability":"VCID-jrxz-b168-7ug4"},{"vulnerability":"VCID-js7k-ptm9-2yh1"},{"vulnerability":"VCID-kb5h-116p-33b4"},{"vulnerability":"VCID-nukv-kkws-xkb1"},{"vulnerability":"VCID-qbdk-hxhg-wbh4"},{"vulnerability":"VCID-rdwq-93d6-c7b4"},{"vulnerability":"VCID-rg5d-st3d-nbah"},{"vulnerability":"VCID-swpr-3qae-d7fe"},{"vulnerability":"VCID-t6db-buke-nfhf"},{"vulnerability":"VCID-tdp4-h4ht-pqhs"},{"vulnerability":"VCID-uhg5-zpzt-e3gz"},{"vulnerability":"VCID-ujbp-cc1r-wfe9"},{"vulnerability":"VCID-v3h9-1t69-v7a3"},{"vulnerability":"VCID-whyk-3ynn-zyf4"},{"vulnerability":"VCID-x5e2-7whc-v3fc"},{"vulnerability":"VCID-x94k-nxyd-27gs"},{"vulnerability":"VCID-xg2f-12w4-yqge"},{"vulnerability":"VCID-xw8r-fn6y-mbhp"},{"vulnerability":"VCID-yeea-n94x-qqch"},{"vulnerability":"VCID-ykxk-6mpc-wkgt"},{"vulnerability":"VCID-yur3-am6j-w7ay"},{"vulnerability":"VCID-zzzs-scbg-bbe9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/8971?format=json","purl":"pkg:pypi/ansible@2.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4yvf-k192-9fca"},{"vulnerability":"VCID-682j-e2pu-1uee"},{"vulnerability":"VCID-7uu9-tj6b-quf6"},{"vulnerability":"VCID-a49n-tvnt-p3df"},{"vulnerability":"VCID-ae1r-yq1g-rkem"},{"vulnerability":"VCID-atun-stks-4kcb"},{"vulnerability":"VCID-axc3-wcsk-q3eg"},{"vulnerability":"VCID-b8zs-br97-57av"},{"vulnerability":"VCID-c1xg-s3kx-gkft"},{"vulnerability":"VCID-ckt2-us5z-pyef"},{"vulnerability":"VCID-d4ka-dk4p-kfhb"},{"vulnerability":"VCID-d7ez-s7qb-p3ay"},{"vulnerability":"VCID-dagf-buer-4ffr"},{"vulnerability":"VCID-dzdx-wae5-8ydy"},{"vulnerability":"VCID-e3z2-ydhb-gqfg"},{"vulnerability":"VCID-ezaq-tqd3-4yd1"},{"vulnerability":"VCID-ezux-6buh-h7h7"},{"vulnerability":"VCID-fj2p-7wkh-1fhq"},{"vulnerability":"VCID-geaa-6dxx-tbcw"},{"vulnerability":"VCID-h1n3-cmte-eugf"},{"vulnerability":"VCID-hqar-fca3-cbht"},{"vulnerability":"VCID-jnmu-c8dt-5yb6"},{"vulnerability":"VCID-jrxz-b168-7ug4"},{"vulnerability":"VCID-js7k-ptm9-2yh1"},{"vulnerability":"VCID-kb5h-116p-33b4"},{"vulnerability":"VCID-nukv-kkws-xkb1"},{"vulnerability":"VCID-qbdk-hxhg-wbh4"},{"vulnerability":"VCID-rdwq-93d6-c7b4"},{"vulnerability":"VCID-rg5d-st3d-nbah"},{"vulnerability":"VCID-swpr-3qae-d7fe"},{"vulnerability":"VCID-tdp4-h4ht-pqhs"},{"vulnerability":"VCID-uhg5-zpzt-e3gz"},{"vulnerability":"VCID-ujbp-cc1r-wfe9"},{"vulnerability":"VCID-v3h9-1t69-v7a3"},{"vulnerability":"VCID-whyk-3ynn-zyf4"},{"vulnerability":"VCID-x94k-nxyd-27gs"},{"vulnerability":"VCID-xg2f-12w4-yqge"},{"vulnerability":"VCID-xw8r-fn6y-mbhp"},{"vulnerability":"VCID-yeea-n94x-qqch"},{"vulnerability":"VCID-ykxk-6mpc-wkgt"},{"vulnerability":"VCID-yur3-am6j-w7ay"},{"vulnerability":"VCID-zzzs-scbg-bbe9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2"},{"url":"http://public2.vulnerablecode.io/api/packages/9393?format=json","purl":"pkg:pypi/ansible@2.8.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4yvf-k192-9fca"},{"vulnerability":"VCID-682j-e2pu-1uee"},{"vulnerability":"VCID-7uu9-tj6b-quf6"},{"vulnerability":"VCID-a49n-tvnt-p3df"},{"vulnerability":"VCID-ae1r-yq1g-rkem"},{"vulnerability":"VCID-atun-stks-4kcb"},{"vulnerability":"VCID-axc3-wcsk-q3eg"},{"vulnerability":"VCID-b8zs-br97-57av"},{"vulnerability":"VCID-c1xg-s3kx-gkft"},{"vulnerability":"VCID-ckt2-us5z-pyef"},{"vulnerability":"VCID-d4ka-dk4p-kfhb"},{"vulnerability":"VCID-d7ez-s7qb-p3ay"},{"vulnerability":"VCID-dagf-buer-4ffr"},{"vulnerability":"VCID-dzdx-wae5-8ydy"},{"vulnerability":"VCID-e3z2-ydhb-gqfg"},{"vulnerability":"VCID-ezaq-tqd3-4yd1"},{"vulnerability":"VCID-ezux-6buh-h7h7"},{"vulnerability":"VCID-fj2p-7wkh-1fhq"},{"vulnerability":"VCID-geaa-6dxx-tbcw"},{"vulnerability":"VCID-h1n3-cmte-eugf"},{"vulnerability":"VCID-hqar-fca3-cbht"},{"vulnerability":"VCID-jnmu-c8dt-5yb6"},{"vulnerability":"VCID-jrxz-b168-7ug4"},{"vulnerability":"VCID-js7k-ptm9-2yh1"},{"vulnerability":"VCID-kb5h-116p-33b4"},{"vulnerability":"VCID-nukv-kkws-xkb1"},{"vulnerability":"VCID-qbdk-hxhg-wbh4"},{"vulnerability":"VCID-rdwq-93d6-c7b4"},{"vulnerability":"VCID-rg5d-st3d-nbah"},{"vulnerability":"VCID-swpr-3qae-d7fe"},{"vulnerability":"VCID-tdp4-h4ht-pqhs"},{"vulnerability":"VCID-uhg5-zpzt-e3gz"},{"vulnerability":"VCID-ujbp-cc1r-wfe9"},{"vulnerability":"VCID-v3h9-1t69-v7a3"},{"vulnerability":"VCID-whyk-3ynn-zyf4"},{"vulnerability":"VCID-x94k-nxyd-27gs"},{"vulnerability":"VCID-xg2f-12w4-yqge"},{"vulnerability":"VCID-xw8r-fn6y-mbhp"},{"vulnerability":"VCID-yeea-n94x-qqch"},{"vulnerability":"VCID-ykxk-6mpc-wkgt"},{"vulnerability":"VCID-yur3-am6j-w7ay"},{"vulnerability":"VCID-zzzs-scbg-bbe9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.3"}],"references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217","reference_id":"","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10217"},{"reference_url":"https://github.com/ansible/ansible/issues/56269","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/issues/56269"},{"reference_url":"https://github.com/ansible/ansible/pull/59427","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ansible/ansible/pull/59427"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7uu9-tj6b-quf6"}