CVE-2018-16859

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.54%

Published

Nov 29, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.

Weaknesses (CWE)

CWE-532CWE-532

Affected Products (4)

redhat · ansible_engine (up to 2.5.13)vulnerable

redhat · ansible_engine (up to 2.6.10)vulnerable

redhat · ansible_engine (up to 2.7.4)vulnerable

redhat · ansible_enginevulnerable

References (20)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html

http://www.securityfocus.com/bid/106004