Early Access — Mondoo Vulnerability Intelligence is currently in preview.
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
Exploitability
AV:NAC:HPR:HUI:NScope
S:UImpact
C:NI:LA:N2.2/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:NInput Validation