ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
https://access.redhat.com/errata/RHSA-2020:0756 | vendor advisory |
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html | third party advisory vendor advisory |
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html | mailing list third party advisory vendor advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856 | issue tracking vendor advisory |