← voltar
CVE-2016-8647

CVE-2016-8647

CVSS 2.2 LOWEPSS 1.4%CWE-20
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Red Hat · Ansible

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://access.redhat.com/errata/RHSA-2017:1685https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647https://github.com/ansible/ansible-modules-core/pull/5388