CVE-2019-14856

ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Name	Vendor	Start Version	End Version
Ansible	Redhat	2.6.0 (including)	2.6.20 (excluding)
Ansible	Redhat	2.7.0 (including)	2.7.14 (excluding)
Ansible	Redhat	2.8.0 (including)	2.8.6 (excluding)
Red Hat Ansible Engine 2.6 for RHEL 7	RedHat	ansible-0:2.6.20-1.el7ae	*
Red Hat Ansible Engine 2.7 for RHEL 7	RedHat	ansible-0:2.7.14-1.el7ae	*
Red Hat Ansible Engine 2.8 for RHEL 7	RedHat	ansible-0:2.8.6-1.el7ae	*
Red Hat Ansible Engine 2.8 for RHEL 8	RedHat	ansible-0:2.8.6-1.el8ae	*
Red Hat Ansible Engine 2 for RHEL 7	RedHat	ansible-0:2.8.6-1.el7ae	*
Red Hat Ansible Engine 2 for RHEL 8	RedHat	ansible-0:2.8.6-1.el8ae	*
Red Hat OpenStack Platform 13.0 (Queens)	RedHat	ansible-0:2.6.20-1.el7ae	*
Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS	RedHat	ansible-0:2.6.20-1.el7ae	*
Ansible	Ubuntu	trusty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-14856
CWE	https://cwe.mitre.org/data/definitions/287.html

Improper Authentication