Skip to content
OpenAdvisories
Medium RHSA-2020:2142 1 CVE

Red Hat Security Advisory: Ansible security and bug fix update (2.7.18)

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.7::el7 ansible 0:2.7.18-1.el7ae

Vulnerabilities 1

  • Medium 5.0
    CVE-2020-1753

    Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

    A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as pass…

    Red Hat Ansible ansible ansible Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811008
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2142.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1753
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1753
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1753