Skip to content
OpenAdvisories
Medium RHSA-2019:2544 1 CVE

Red Hat Security Advisory: Ansible security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.7::el7 ansible 0:2.7.13-1.el7ae

Vulnerabilities 1

  • Medium 6.4
    CVE-2019-10206

    Ansible password prompts could expose passwords

    ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent…

    Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://github.com/ansible/ansible/blob/v2.7.13/changelogs/CHANGELOG-v2.7.rst
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732623
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2544.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10206
  • article
    https://github.com/ansible/ansible/pull/59246