diff options
| author | Patrick O'Brien <poblahblahblah@users.noreply.github.com> | 2019-11-01 07:21:11 -0700 |
|---|---|---|
| committer | Abhijeet Kasurde <akasurde@redhat.com> | 2019-11-01 19:51:11 +0530 |
| commit | c76e074e4c71c7621a1ca8159261c1959b5287af (patch) | |
| tree | ad7a67a682a51865e626b4f6562856dee2203dd2 /lib/ansible/plugins/callback | |
| parent | 56d5fd34e38321302bbc8e3d74504a1c48825219 (diff) | |
| download | ansible-c76e074e4c71c7621a1ca8159261c1959b5287af.tar.gz | |
Callback: removing args from task_fields from Sumologic and Splunk plugin(#63527)
CVE-2019-14864 Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs
Fixes #63522
Signed-off-by: Patrick O’Brien <patrick.obrien@thetradedesk.com>
Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
Diffstat (limited to 'lib/ansible/plugins/callback')
| -rw-r--r-- | lib/ansible/plugins/callback/splunk.py | 3 | ||||
| -rw-r--r-- | lib/ansible/plugins/callback/sumologic.py | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/lib/ansible/plugins/callback/splunk.py b/lib/ansible/plugins/callback/splunk.py index 26b5d1d885..4f0e7eec3c 100644 --- a/lib/ansible/plugins/callback/splunk.py +++ b/lib/ansible/plugins/callback/splunk.py @@ -98,6 +98,9 @@ class SplunkHTTPCollectorSource(object): else: ansible_role = None + if 'args' in result._task_fields: + del result._task_fields['args'] + data = {} data['uuid'] = result._task._uuid data['session'] = self.session diff --git a/lib/ansible/plugins/callback/sumologic.py b/lib/ansible/plugins/callback/sumologic.py index 4a2bd0b5bb..22e217f0b5 100644 --- a/lib/ansible/plugins/callback/sumologic.py +++ b/lib/ansible/plugins/callback/sumologic.py @@ -89,6 +89,9 @@ class SumologicHTTPCollectorSource(object): else: ansible_role = None + if 'args' in result._task_fields: + del result._task_fields['args'] + data = {} data['uuid'] = result._task._uuid data['session'] = self.session |