GitHub Advisoryadvisory · PyPI

GHSA-x4cm-m36h-c6qj Improper Input Validation in ansible

MEDIUM Published 2018-10-10 Modified 2024-09-03 Official page ↗
Aliases
CVE-2016-8647
Ecosystem
PyPI
Packages
ansible
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20
Reviewed
2020-06-16

Affected packages

• PyPI ansible: < 2.2.1.0 → fixed in 2.2.1.0

Description

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

Related

Alias · CVE (1)

  • CVE-2016-8647 An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References