CVE-2016-8647

Advisory

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-x4cm-m36h-c6qj
• https://nvd.nist.gov/vuln/detail/CVE-2016-8647
• https://github.com/ansible/ansible-modules-core/pull/5388
• https://access.redhat.com/errata/RHSA-2017:1685
• https://access.redhat.com/security/cve/CVE-2016-8647
• https://bugzilla.redhat.com/show_bug.cgi?id=1396174
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647
• https://github.com/ansible/ansible
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8647