CVE-2017-7550: Red Hat Ansible

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.

Affected products

• Red Hat Ansible: from 2.3.0, before 2.3.3 (fixed in 2.3.3); from 2.4.0, before 2.4.1 (fixed in 2.4.1)
• Red Hat Enterprise Linux Server: version 7.0 only

Published 2017-11-21. Last modified 2026-06-17.