CVE:CVE-2018-16876
CNNVD:CNNVD-201812-717
Ansible是美国Ansible公司的一款计算机系统配置管理器，它可用于发布、管理和编排计算机系统。
Ansible中存在信息泄露漏洞。在vvv+模式下（no_log功能开启），攻击者可利用该漏洞获取敏感数据。
solution:Upgrade redhat ansible to a higher version than 2.5.14,2.6.11,2.7.5,and avoid the version [2.5.0,2.5.14),[2.6.0,2.6.11),[2.7.0,2.7.5); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat ansible_engine to a higher version than 2.0,2.5,2.6,2.7,and avoid the version 2.0,2.5,2.6,2.7; Upgrade redhat openstack to a higher version than 14,and avoid the version 14; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade suse package_hub to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04