Sensitive Data Leakage in Ansible User Module

CVE-2018-16837 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.

Learn more about our User Device Pen Test.