ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2018.0303
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2018-0303)
Resumen:	The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2018-0303 advisory.
Descripción:	Summary: The remote host is missing an update for the 'ansible' package(s) announced via the MGASA-2018-0303 advisory. Vulnerability Insight: Ansible prior to 2.4.5 does not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible (CVE-2018-10855). Affected Software/OS: 'ansible' package(s) on Mageia 5, Mageia 6. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10855 Debian Security Information: DSA-4396 (Google Search) https://www.debian.org/security/2019/dsa-4396 RedHat Security Advisories: RHBA-2018:3788 https://access.redhat.com/errata/RHBA-2018:3788 RedHat Security Advisories: RHSA-2018:1948 https://access.redhat.com/errata/RHSA-2018:1948 RedHat Security Advisories: RHSA-2018:1949 https://access.redhat.com/errata/RHSA-2018:1949 RedHat Security Advisories: RHSA-2018:2022 https://access.redhat.com/errata/RHSA-2018:2022 RedHat Security Advisories: RHSA-2018:2079 https://access.redhat.com/errata/RHSA-2018:2079 RedHat Security Advisories: RHSA-2018:2184 https://access.redhat.com/errata/RHSA-2018:2184 RedHat Security Advisories: RHSA-2018:2585 https://access.redhat.com/errata/RHSA-2018:2585 RedHat Security Advisories: RHSA-2019:0054 https://access.redhat.com/errata/RHSA-2019:0054 https://usn.ubuntu.com/4072-1/
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.