CVSS 3.1
4.9 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NCVE-2016-8647
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:ansible_engine
- redhat:virtualization
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-x4cm-m36h-c6qj | PyPI | ansible | <2.2.1.0 | 2.2.1.0 |
| PYSEC-2018-58 | PyPI | ansible | <2.2.1.0 | 2.2.1.0 |