Redhat Ansible Engine 2.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ansible_engine:2.7:*:*:*:*:*:*:*

part: a version: 2.7 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAnsible Engine (16c6ea6d-2eb0-5f5b-8a65-adb48f01e2e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ansible purl2cpe 2026-06-01 10:12:54.637456
pkg:deb/ubuntu/ansible purl2cpe 2026-06-01 10:12:54.637457
pkg:docker/ansible/ansible purl2cpe 2026-06-01 10:12:54.637459
pkg:github/ansible/ansible purl2cpe 2026-06-01 10:12:54.637460
pkg:rpm/fedora/ansible purl2cpe 2026-06-01 10:12:54.637462
pkg:rpm/opensuse/ansible purl2cpe 2026-06-01 10:12:54.637463

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16876 vulnerable 2026-06-08 05:11:05.688121 Details available
LOW (3.1)
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.
Published: 2019-01-03T15:00:00.000Z
Updated: 2024-08-05T10:32:54.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16837 vulnerable 2026-06-08 05:11:05.538655 Details available
HIGH (7.8)
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
Published: 2018-10-23T15:00:00.000Z
Updated: 2024-08-05T10:32:54.010Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.