Skip to content
OpenAdvisories
Medium RHSA-2018:3770 1 CVE

Red Hat Security Advisory: ansible security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.5::el7 ansible 0:2.5.13-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.5::el7 ansible-doc 0:2.5.13-1.el7ae

Vulnerabilities 1

  • Medium 4.2
    CVE-2018-16859

    Ansible Logs Passwords If PowerShell ScriptBlock is Enabled

    Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these l…

    Red Hat Ansible ansible ansible Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1649607
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3770.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16859
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16859
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16859
  • article
    https://github.com/ansible/ansible/pull/49142