PYSEC-2018-44: High severity Ansible User module vulnerability
Published Oct 23, 2018
·Updated
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
Affected Software
1 affected component
Ansible User module
Event History
Oct 23, 2018
CVE Published
via OSV·03:29 PM
Data Sourced
via OSV·03:29 PM
DescriptionSeverity