CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- opensuse:backports_sle
- opensuse:leap
- redhat:ansible
- redhat:openstack
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6fq2-x65v-v9h7 | PyPI | ansible | >=2.8.0 <2.8.6 | 2.8.6 |
| GHSA-6fq2-x65v-v9h7 | PyPI | ansible | >=2.7.0 <2.7.14 | 2.7.14 |
| GHSA-6fq2-x65v-v9h7 | PyPI | ansible | >=2.6.0 <2.6.20 | 2.6.20 |
| PYSEC-2019-146 | PyPI | ansible | >=2.6.0 <2.6.20 >=2.7.0 <2.7.14 >=2.8.0 <2.8.6 | 2.6.20, 2.7.14, 2.8.6 |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
- https://access.redhat.com/errata/RHSA-2020:0756
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html