[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5h5kpduOFRiWmgfxiOEO4aWi3CzS-aaEo7V5WxriBmU":3,"g5a-risk:CVE-2018-10855":218},{"success":4,"data":5,"meta":216},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":90,"references":91,"referencesCount":90,"weaknesses":131,"weaknessesCount":140,"isActivelyExploited":141,"cisaInfo":26,"otxData":26,"relatedBlogPosts":142,"seoMetadata":143,"configurations":168,"relatedVendorCves":214,"notableEvents":215},"CVE-2018-10855","What is CVE-2018-10855?","Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible.","Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensiti...","2018-07-03T01:29:00.58","2021-08-04T17:14:46.777",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.03113,[45,45,45,45,45,45,45],"Medium",[49,54,56,60,64,68,73,76,79,84,87],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"redhat","ansible_engine","*","cpe:2.3:a:redhat:ansible_engine:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":39,"criteria":55,"vulnerable":4},"cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*",{"vendor":50,"product":57,"version":58,"criteria":59,"vulnerable":4},"cloudforms","4.6","cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*",{"vendor":50,"product":61,"version":62,"criteria":63,"vulnerable":4},"openstack","13","cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",{"vendor":50,"product":65,"version":66,"criteria":67,"vulnerable":4},"virtualization","4.0","cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":71,"criteria":72,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":50,"product":61,"version":74,"criteria":75,"vulnerable":4},"10","cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",{"vendor":50,"product":61,"version":77,"criteria":78,"vulnerable":4},"12","cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":82,"criteria":83,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":80,"product":81,"version":85,"criteria":86,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":80,"product":81,"version":88,"criteria":89,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",11,[92,97,100,103,106,109,112,115,118,122,127],{"url":93,"source":94,"tags":95},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2018:3788","Red Hat",[96],"Vendor Advisory",{"url":98,"source":94,"tags":99},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1948",[96],{"url":101,"source":94,"tags":102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:1949",[96],{"url":104,"source":94,"tags":105},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2022",[96],{"url":107,"source":94,"tags":108},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2079",[96],{"url":110,"source":94,"tags":111},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2184",[96],{"url":113,"source":94,"tags":114},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2585",[96],{"url":116,"source":94,"tags":117},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0054",[96],{"url":119,"source":94,"tags":120},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-10855",[121,96],"Issue Tracking",{"url":123,"source":124,"tags":125},"https:\u002F\u002Fusn.ubuntu.com\u002F4072-1\u002F","Ubuntu",[126],"Third Party Advisory",{"url":128,"source":129,"tags":130},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4396","Debian",[126],[132],{"id":133,"name":134,"description":135,"extendedDescription":136,"status":137,"abstraction":138,"structure":139},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",1,false,[],{"title":144,"metaDescription":145,"keywords":146,"canonicalUrl":147,"structuredData":148},"What is CVE-2018-10855? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10855, a medium severity cyber security vulnerability from 2018. Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do no...","CVE-2018-10855, CVE-2018-10855 vulnerability, CVE-2018-10855 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redhat security, debian security, canonical security, ansible_engine vulnerability, cloudforms vulnerability, openstack vulnerability, virtualization vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-10855",{"@context":149,"@type":150,"headline":144,"description":145,"datePublished":10,"dateModified":11,"author":151,"publisher":155,"about":159,"mainEntityOfPage":163,"articleSection":166,"keywords":167},"https:\u002F\u002Fschema.org","TechArticle",{"@type":152,"name":153,"url":154},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":152,"name":153,"url":154,"logo":156},{"@type":157,"url":158},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":160,"name":6,"description":161,"additionalType":162},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":164,"@id":165},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10855","Cybersecurity","CVE-2018-10855, CVE-2018-10855 vulnerability, CVE-2018-10855 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[169,190,196,204],{"Operator":26,"Negate":26,"Nodes":170},[171],{"Operator":172,"Negate":26,"CPEMatch":173},"OR",[174,178,182,184,186,188],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":176,"VersionEndExcluding":177,"VersionEndIncluding":26},"9B1CF308-19C7-4007-A72F-44F68C36B22A","2.4","2.4.5",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":179,"VersionStartExcluding":180,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":181},"725395D6-82FA-47E1-A88D-F25B576E4B91","2.5","2.5.5",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8989CD03-49A1-4831-BF98-9F21592788BE",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"67F7263F-113D-4BAE-B8CB-86A61531A2AC",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"704CFA1A-953E-4105-BFBE-406034B83DED",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6",{"Operator":26,"Negate":26,"Nodes":191},[192],{"Operator":172,"Negate":26,"CPEMatch":193},[194],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":197},[198],{"Operator":172,"Negate":26,"CPEMatch":199},[200,202],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4D4AC996-B340-4A14-86F7-FF83B4D5EC8F",{"Operator":26,"Negate":26,"Nodes":205},[206],{"Operator":172,"Negate":26,"CPEMatch":207},[208,210,212],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",[],[],{"lastModified":11,"cacheTime":217,"version":39},1792265186575,{"score":219,"band":220,"action":221,"scoredAt":222},23,"Low","Monitor","2026-10-16T06:44:23.404918+00:00"]