Search for packages
| purl | pkg:pypi/ansible@2.3.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-vhdj-z1ew-aaap
Aliases: CVE-2017-7550 GHSA-588w-w6mv-3cw5 PYSEC-2017-4 |
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation. |
Affected by 0 other vulnerabilities. Affected by 37 other vulnerabilities. Affected by 37 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:26:53.225853+00:00 | GitLab Importer | Affected by | VCID-vhdj-z1ew-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/ansible/CVE-2017-7550.yml | 34.0.1 |
| 2024-01-03T17:52:50.253637+00:00 | GitLab Importer | Affected by | VCID-vhdj-z1ew-aaap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/ansible/CVE-2017-7550.yml | 34.0.0rc1 |
| 2024-01-03T17:44:28.627536+00:00 | GHSA Importer | Affected by | VCID-vhdj-z1ew-aaap | https://github.com/advisories/GHSA-588w-w6mv-3cw5 | 34.0.0rc1 |