Red Hat Security Advisory: ansible security and bug fix update
An update for ansible is now available for Ansible Engine 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-16859US | medium4.4 | — | ||
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaint… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Fixedansible-0:2.6.10-1.el7ae.noarch as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3771 - Fixedansible-0:2.6.10-1.el7ae.src as a component of Red Hat Ansible Engine 2.6 for RHEL 7 Server
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2018:3771
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan