CVE-2017-7473

ansible: Potential information disclosure via no_log directive

View on CVE.org
Published Jul 21, 2017 CVSS 3.0 · 4.7 Medium EPSS n/a KEV · Not listed
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none.

Analysis

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none.

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Subscriptions

No data.

Weaknesses
  • CWE-212

    Improper Removal of Sensitive Information Before Storage or Transfer

Sources

Status
REJECTED
Assigner
redhat
Published
Updated
Feb 13, 2025, 3:46 PM
Reserved
Apr 5, 2017, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Jul 21, 2017, 10:29 PM
Modified
Nov 7, 2023, 2:50 AM

View source JSON

Severity
Public date
Apr 11, 2017, 12:00 AM

View source Bugzilla JSON

No data.