Login Request a demo
Medium severity · published Nov 29, 2018
CVE-2018-16859
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in…
4.4
CVSS
0.5%
EPSS
No
On KEV
Description
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Ansible Engine · Redhat
before 2.5.13; 2.6.0 before 2.6.10; 2.7.0 before 2.7.4; 2.7.5 through 2.8 · source: NVD
Affected product
AE
Ansible Engine
Redhat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-16859
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-16859
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
Third Party Advisory
http://www.securityfocus.com/bid/106004
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3770
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3771
More from Ansible Engine
9.8
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe
9.8
CVE-2018-7750
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and…
7.8
CVE-2020-1737
A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not…
7.8
CVE-2019-14846
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of…
7.8
CVE-2018-16837
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen