{"id":"CVE-2019-14856","published":"2019-11-26T13:01:31Z","modified":"2024-08-05T00:26:39Z","title":"ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None","vendor":null,"product":"ansible","tier":"tail","description":{"text":"ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None","provenance":"source","from":"CVE.org"},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01663,"percentile":0.76711,"provenance":"source"},"cwes":[{"id":"CWE-287","name":"Improper Authentication"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2020:0756","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856","tags":["x_refsource_CONFIRM"]}],"priority":{"score":19.8,"factors":[{"name":"EPSS percentile","points":15.34},{"name":"CVSS severity","points":4.48}]},"affectedVersions":[{"vendor":"[UNKNOWN]","product":"ansible","versions":["2.8.6","2.7.14","2.6.20"]}],"affected":[{"ecosystem":"PyPI","package":"ansible","vulnerableRanges":[">=2.8.0, <2.8.6",">=2.7.0, <2.7.14",">=2.6.0, <2.6.20"],"patched":["2.8.6","2.7.14","2.6.20"],"from":["GHSA-6fq2-x65v-v9h7","PYSEC-2019-146"],"provenance":"source"}],"euvd":{"id":"EUVD-2019-0004","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-10206","published":"2019-11-22","fixed":"2.8.4","kev":false,"link":{"from":"CVE-2019-10206","to":"CVE-2019-14856","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:ansible","fromFixed":"2.6.19","toFixed":"2.6.20","daysApart":4}]}},{"cve":"CVE-2019-10217","published":"2019-11-25","fixed":"2.8.4","kev":false},{"cve":"CVE-2019-14846","published":"2019-10-08","fixed":"2.8.6","kev":false},{"cve":"CVE-2019-14856","published":"2019-11-26","fixed":"2.8.6","kev":false},{"cve":"CVE-2019-14858","published":"2019-10-14","fixed":"2.9.0rc4","kev":false},{"cve":"CVE-2019-14864","published":"2020-01-02","fixed":"2.9.1","kev":false},{"cve":"CVE-2019-14904","published":"2020-08-25","fixed":"2.9.3","kev":false}],"package":"PyPI:ansible"}}