From ac96ab2f9d88244648eabc076269a450c73ff0a1 Mon Sep 17 00:00:00 2001 From: Konrad Borowski Date: Mon, 27 Jun 2022 10:02:27 +0200 Subject: [PATCH] Improve GHSA-fh5v-5f35-2rv2 --- .../GHSA-fh5v-5f35-2rv2.json | 42 ++++++++++++++++++- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/advisories/unreviewed/2022/03/GHSA-fh5v-5f35-2rv2/GHSA-fh5v-5f35-2rv2.json b/advisories/unreviewed/2022/03/GHSA-fh5v-5f35-2rv2/GHSA-fh5v-5f35-2rv2.json index 98e8e3dd51e37..609efab1fc058 100644 --- a/advisories/unreviewed/2022/03/GHSA-fh5v-5f35-2rv2/GHSA-fh5v-5f35-2rv2.json +++ b/advisories/unreviewed/2022/03/GHSA-fh5v-5f35-2rv2/GHSA-fh5v-5f35-2rv2.json @@ -1,11 +1,12 @@ { "schema_version": "1.2.0", "id": "GHSA-fh5v-5f35-2rv2", - "modified": "2022-03-23T00:00:33Z", + "modified": "2022-06-27T08:02:27Z", "published": "2022-03-17T00:00:44Z", "aliases": [ "CVE-2021-20180" ], + "summary": "", "details": "A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.", "severity": [ { @@ -14,7 +15,44 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "ansible" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.8.0a1" + }, + { + "fixed": "2.8.19" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "ansible" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.9.0b1" + }, + { + "fixed": "2.9.18" + } + ] + } + ] + } ], "references": [ {