CVE-2019-10206mediumCWE-522

CVE-2019-10206: medium-severity vulnerability in Red Hat Ansible

Published · Updated

Follow this CVE+ Monitor Ansible+ Monitor ansible

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 1.5%
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected products
Red Hat · Ansible
Related CVEs — Red Hat Ansible

In the same product, most dangerous first.

CVE-2016-8628HIGHCVE-2016-8628EPSS 3.2%CVE-2016-8614MEDIUMCVE-2016-8614EPSS 2.5%CVE-2019-14864MEDIUMCVE-2019-14864EPSS 1.9%CVE-2019-10217MEDIUMCVE-2019-10217EPSS 1.9%CVE-2016-8647LOWCVE-2016-8647EPSS 1.4%CVE-2019-14905HIGHCVE-2019-14905EPSS 0.7%