CVE-2019-10206
Fixed in a distro release EPSS 2%CVSS 6.4
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
Products: Red Hat Ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 2.8.4 |
| PyPI | ansible | 2.7.13 |
| PyPI | ansible | 2.6.19 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | ansible | 2.8.4-r0 |
| Alpine 3.11 | ansible | 2.8.4-r0 |
| Alpine 3.12 | ansible | 2.8.4-r0 |
| Alpine 3.13 | ansible-base | 2.8.4-r0 |
| Alpine 3.14 | ansible-base | 2.8.4-r0 |
| Alpine 3.7 | ansible | 2.4.6.0-r1 |
| Alpine 3.8 | ansible | 2.6.19-r0 |
| Alpine 3.9 | ansible | 2.7.13-r0 |
| Debian 10 | ansible | 2.7.7+dfsg-1+deb10u2 |
| Debian 10 | ansible | 2.7.7+dfsg-1+deb10u1 |
| Debian 12 | ansible | 2.8.6+dfsg-1 |
| Debian 13 | ansible | 2.8.6+dfsg-1 |
| Debian 14 | ansible | 2.8.6+dfsg-1 |
| Red Hat ansible engine 2 | ansible | 0:2.8.4-1.el7ae |
| Red Hat ansible engine 2 | ansible | 0:2.8.4-1.el8ae |
| Red Hat ansible engine 2.6 | ansible | 0:2.6.19-1.el7ae |
| Red Hat ansible engine 2.7 | ansible | 0:2.7.13-1.el7ae |
| Red Hat ansible engine 2.8 | ansible | 0:2.8.4-1.el7ae |
| Red Hat ansible engine 2.8 | ansible | 0:2.8.4-1.el8ae |
| Red Hat openstack 13 | ansible | 0:2.6.19-1.el7ae |
| Red Hat openstack 14 | ansible | 0:2.6.19-1.el7ae |
| SUSE HPE Helion OpenStack 8 | ansible | 2.4.6.0-3.6.1 |
| SUSE HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 |
| SUSE HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20201007-1.29.1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 |
| SUSE HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 |
| SUSE HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 |
| SUSE HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE OpenStack Cloud 8 | ansible | 2.4.6.0-3.6.1 |
| SUSE OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud 8 | storm | 1.2.3-3.6.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.4.6.0-3.6.1 |
| SUSE OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 |
| SUSE OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 |
| SUSE Package Hub 15 SP1 | ansible | 2.9.6-bp151.3.6.1 |
| Ubuntu Pro 14.04 LTS | ansible | 1.5.4+dfsg-1ubuntu0.1~esm3 |
| Ubuntu Pro 16.04 LTS | ansible | 2.0.0.2-2ubuntu1.3+esm5 |
| Ubuntu Pro 18.04 LTS | ansible | 2.5.1+dfsg-1ubuntu0.1+esm5 |
| Ubuntu Pro 20.04 LTS | ansible | 2.9.6+dfsg-1ubuntu0.1~esm3 |
| openSUSE Leap 15.1 | ansible | 2.9.6-lp151.2.7.1 |
| openSUSE Tumbleweed | ansible-10 | 10.6.0-1.1 |
| openSUSE Tumbleweed | ansible-11 | 11.11.0-1.1 |
| openSUSE Tumbleweed | ansible-12 | 12.2.0-1.1 |
| openSUSE Tumbleweed | ansible-13 | 13.7.0-1.1 |
| openSUSE Tumbleweed | ansible-9 | 9.8.0-1.1 |