CVE-2020-1753
Fixed in a distro release EPSS <1%CVSS 5.0
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.
Products: Red Hat Ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 2.7.18 |
| PyPI | ansible | 2.8.12 |
| PyPI | ansible | 2.9.7 |
| PyPI | ansible | 2.8.11 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:10 | ansible | 2.7.7+dfsg-1+deb10u1 |
| Debian:12 | ansible | 2.9.16+dfsg-1 |
| Debian:13 | ansible | 2.9.16+dfsg-1 |
| Debian:14 | ansible | 2.9.16+dfsg-1 |
| Red Hat:ansible_engine:2 | ansible | 0:2.9.7-1.el7ae |
| Red Hat:ansible_engine:2 | ansible | 0:2.9.7-1.el8ae |
| Red Hat:ansible_engine:2 | ansible-test | 0:2.9.7-1.el7ae |
| Red Hat:ansible_engine:2 | ansible-test | 0:2.9.7-1.el8ae |
| Red Hat:ansible_engine:2.7 | ansible | 0:2.7.18-1.el7ae |
| Red Hat:ansible_engine:2.8 | ansible | 0:2.8.16-1.el8ae |
| Red Hat:ansible_engine:2.8 | ansible | 0:2.8.16-1.el7ae |
| Red Hat:ansible_engine:2.9 | ansible | 0:2.9.7-1.el7ae |
| Red Hat:ansible_engine:2.9 | ansible | 0:2.9.7-1.el8ae |
| Red Hat:ansible_engine:2.9 | ansible-test | 0:2.9.7-1.el8ae |
| Red Hat:ansible_engine:2.9 | ansible-test | 0:2.9.7-1.el7ae |
| SUSE:HPE Helion OpenStack 8 | ansible | 2.9.14-3.15.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE:HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20201007-1.29.1 |
| SUSE:HPE Helion OpenStack 8 | grafana | 6.7.4-4.12.1 |
| SUSE:HPE Helion OpenStack 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE:HPE Helion OpenStack 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE:HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE:HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE:HPE Helion OpenStack 8 | python-Django | 1.11.29-3.19.2 |
| SUSE:HPE Helion OpenStack 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE:HPE Helion OpenStack 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE:HPE Helion OpenStack 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE:HPE Helion OpenStack 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE:HPE Helion OpenStack 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE:HPE Helion OpenStack 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE:HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE:HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20200922-3.23.1 |
| SUSE:HPE Helion OpenStack 8 | storm | 1.2.3-3.6.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev3-14.32.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| SUSE:Manager Client Tools 15 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE:Manager Client Tools 15 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE:Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 |
| SUSE:Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE:Manager Client Tools 15 | grafana | 9.5.18-150000.1.63.2 |
| SUSE:Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 |
| SUSE:Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 |
| SUSE:Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 |
| SUSE:Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 |
| SUSE:Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 |
| SUSE:Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE:Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE:Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE:Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 |
| SUSE:Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE:OpenStack Cloud 8 | ansible | 2.9.14-3.15.1 |
| SUSE:OpenStack Cloud 8 | ardana-ansible | 8.0+git.1596735237.54109b1-3.77.1 |
| SUSE:OpenStack Cloud 8 | ardana-cinder | 8.0+git.1596129856.263f430-3.43.1 |
| SUSE:OpenStack Cloud 8 | ardana-glance | 8.0+git.1593631779.76fa9b7-3.24.1 |
| SUSE:OpenStack Cloud 8 | ardana-mq | 8.0+git.1593618123.678c32b-3.26.1 |
| SUSE:OpenStack Cloud 8 | ardana-nova | 8.0+git.1601298847.dd01585-3.42.1 |
| SUSE:OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1595885113.93abcbc-3.49.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud 8 | grafana | 6.7.4-4.12.1 |
| SUSE:OpenStack Cloud 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE:OpenStack Cloud 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE:OpenStack Cloud 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE:OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE:OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE:OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE:OpenStack Cloud 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE:OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE:OpenStack Cloud 8 | python-Django | 1.11.29-3.19.2 |
| SUSE:OpenStack Cloud 8 | python-Flask-Cors | 3.0.3-3.3.1 |
| SUSE:OpenStack Cloud 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE:OpenStack Cloud 8 | python-ardana-packager | 0.0.3-7.7.2 |
| SUSE:OpenStack Cloud 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE:OpenStack Cloud 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE:OpenStack Cloud 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE:OpenStack Cloud 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE:OpenStack Cloud 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE:OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE:OpenStack Cloud 8 | storm | 1.2.3-3.6.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.28.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.29.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.26.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.30.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.27.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.27.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.29.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev3-14.32.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.29.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.30.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.28.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.33.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.24.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.32.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev76-11.30.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.29.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.28.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.21.1 |
| SUSE:OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.28.1 |
| SUSE:OpenStack Cloud Crowbar 8 | ansible | 2.9.14-3.15.1 |
| SUSE:OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1600432272.b3ad722f0-3.44.1 |
| SUSE:OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1599037158.5c4d07480-4.43.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20201007-1.29.1 |
| SUSE:OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.12.1 |
| SUSE:OpenStack Cloud Crowbar 8 | grafana-natel-discrete-panel | 0.0.9-3.3.6 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-cinder | 11.2.3~dev29-3.28.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-cinder-doc | 11.2.3~dev29-3.28.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.15.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.37.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.37.1 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev76-3.39.2 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev76-3.39.1 |
| SUSE:OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.19.2 |
| SUSE:OpenStack Cloud Crowbar 8 | python-Pillow | 4.2.1-3.9.2 |
| SUSE:OpenStack Cloud Crowbar 8 | python-keystoneclient | 3.13.1-3.3.2 |
| SUSE:OpenStack Cloud Crowbar 8 | python-keystonemiddleware | 4.17.1-5.3.1 |
| SUSE:OpenStack Cloud Crowbar 8 | python-kombu | 4.1.0-3.7.1 |
| SUSE:OpenStack Cloud Crowbar 8 | python-straight-plugin | 1.5.0-1.3.1 |
| SUSE:OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.12.1 |
| SUSE:OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20200922-3.23.1 |
| SUSE:OpenStack Cloud Crowbar 8 | rubygem-crowbar-client | 3.9.3-1.1 |
| SUSE:OpenStack Cloud Crowbar 8 | storm | 1.2.3-3.6.1 |
| SUSE:Package Hub 15 SP3 | ansible | 2.9.21-bp153.2.3.1 |
| Ubuntu:24.04:LTS | ansible | no fix |
| Ubuntu:25.10 | ansible | no fix |
| Ubuntu:26.04:LTS | ansible | no fix |
| Ubuntu:26.10 | ansible | no fix |
| Ubuntu:Pro:14.04:LTS | ansible | no fix |
| Ubuntu:Pro:16.04:LTS | ansible | no fix |
| Ubuntu:Pro:18.04:LTS | ansible | no fix |
| Ubuntu:Pro:20.04:LTS | ansible | no fix |
| Ubuntu:Pro:22.04:LTS | ansible | no fix |
| openSUSE:Leap 15.3 | ansible | 2.9.21-bp153.2.3.1 |
| openSUSE:Leap 15.5 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE:Leap 15.5 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE:Leap 15.5 | ansible | 2.9.27-150000.1.17.2 |
| openSUSE:Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| openSUSE:Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| openSUSE:Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 |
| openSUSE:Tumbleweed | ansible-10 | 10.6.0-1.1 |
| openSUSE:Tumbleweed | ansible-11 | 11.11.0-1.1 |
| openSUSE:Tumbleweed | ansible-12 | 12.2.0-1.1 |
| openSUSE:Tumbleweed | ansible-13 | 13.7.0-1.1 |
| openSUSE:Tumbleweed | ansible-9 | 9.8.0-1.1 |