CVE-2020-1739

LowCVSS 3.9/10Last modified Jun 17, 2026

Description

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.

Metrics

CVSS 3.1 3.9/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Red HatAnsible2.7.16 and prior; 2.8.8 and prior; 2.9.5 and prior

References

Timeline

Published
Mar 12, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-173908.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker muCVE-2020-173916.5This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker mCVE-2020-173928.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker muCVE-2020-173936.5This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker mCVE-2020-173946.0This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attackCVE-2020-173958.2This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firCVE-2020-173968.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firCVE-2020-173978.2This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firCVE-2020-173986.5This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must fiCVE-2020-173998.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firCVE-2020-17404.7A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another CVE-2020-174008.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must fir
CVE-2020-1739: Low severity, CVSS 3.9 | Vulnix