Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ansible_engine:2.8.0:*:*:*:*:*:*:*

part: a version: 2.8.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAnsible Engine (16c6ea6d-2eb0-5f5b-8a65-adb48f01e2e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ansible purl2cpe 2026-06-01 10:12:54.637637
pkg:deb/ubuntu/ansible purl2cpe 2026-06-01 10:12:54.637638
pkg:docker/ansible/ansible purl2cpe 2026-06-01 10:12:54.637639
pkg:github/ansible/ansible purl2cpe 2026-06-01 10:12:54.637641
pkg:rpm/fedora/ansible purl2cpe 2026-06-01 10:12:54.637642
pkg:rpm/opensuse/ansible purl2cpe 2026-06-01 10:12:54.637644

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14846 vulnerable 2026-06-08 05:12:56.259703 Details available
HIGH (7.3)
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
Published: 2019-10-08T18:44:09.000Z
Updated: 2024-08-05T00:26:39.176Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.