CVE-2017-7550: Inclusion of Sensitive Information in Log Files

November 21, 2017 (updated October 9, 2019)

A flaw was found in the way Ansible passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host’s logs.

References

access.redhat.com/errata/RHSA-2017:2966
bugzilla.redhat.com/show_bug.cgi?id=1473645
github.com/ansible/ansible/issues/30874
nvd.nist.gov/vuln/detail/CVE-2017-7550

Code Behaviors & Features

Detect and mitigate CVE-2017-7550 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →