Логотип exploitDog
bind:CVE-2020-1746
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-1746

Количество 7

Количество 7

ubuntu логотип

CVE-2020-1746

больше 5 лет назад

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
EPSS: Низкий
redhat логотип

CVE-2020-1746

почти 6 лет назад

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
EPSS: Низкий
nvd логотип

CVE-2020-1746

больше 5 лет назад

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
EPSS: Низкий
debian логотип

CVE-2020-1746

больше 5 лет назад

A flaw was found in the Ansible Engine affecting Ansible Engine versio ...

CVSS3: 5
EPSS: Низкий
github логотип

GHSA-j2h6-73x8-22c4

почти 5 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in ansible

CVSS3: 5
EPSS: Низкий
fstec логотип

BDU:2022-00238

больше 5 лет назад

Уязвимость системы управления конфигурациями Ansible, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0081-1

почти 4 года назад

Security update for ansible

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-1746

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
0%
Низкий
больше 5 лет назад
redhat логотип
CVE-2020-1746

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-1746

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.

CVSS3: 5
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2020-1746

A flaw was found in the Ansible Engine affecting Ansible Engine versio ...

CVSS3: 5
0%
Низкий
больше 5 лет назад
github логотип
GHSA-j2h6-73x8-22c4

Exposure of Sensitive Information to an Unauthorized Actor in ansible

CVSS3: 5
0%
Низкий
почти 5 лет назад
fstec логотип
BDU:2022-00238

Уязвимость системы управления конфигурациями Ansible, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5
0%
Низкий
больше 5 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0081-1

Security update for ansible

почти 4 года назад

Уязвимостей на страницу