CVE:CVE-2019-14864
CNNVD:CNNVD-201910-1316
Ansible是美国Ansible公司的一款计算机系统配置管理器。该产品可用于发布、管理和编排计算机系统。
Ansible中存在安全漏洞。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Ansible 2.9.1之前的2.9.x版本，2.8.7之前的2.8.x版本，2.7.15之前的2.7.x版本。
solution:Upgrade redhat ansible to a higher version than 2.7.15,2.8.7,2.9.1,and avoid the version [2.7.0,2.7.15),[2.8.0,2.8.7),[2.9.0,2.9.1); Upgrade redhat ansible_tower to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat ceph_storage to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat cloudforms_management_engine to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1