Lucene search

CVE-2021-20180

🗓️ 16 Mar 2022 15:09:15Reported by redhatType

A flaw in ansible module discloses credentials in console log, allowing theft of bitbucket_pipeline credentials

Reporter	Title	Published	Views	Family All 48
Veracode	Information Disclosure	25 Feb 202106:28	–	veracode
OSV	Insertion of Sensitive Information into Log File in ansible	17 Mar 202200:00	–	osv
OSV	CVE-2021-20180	16 Mar 202215:15	–	osv
OSV	Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)	16 Sep 202405:29	–	osv
OSV	Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.6]	16 Sep 202405:29	–	osv
OSV	Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)	16 Sep 202405:29	–	osv
OSV	ansible-9-9.8.0-1.1 on GA media	8 Aug 202400:00	–	osv
Debian CVE	CVE-2021-20180	16 Mar 202215:15	–	debiancve
RedhatCVE	CVE-2021-20180	13 Jan 202114:19	–	redhatcve
NVD	CVE-2021-20180	16 Mar 202215:15	–	nvd

Nvd

Vulners

Node

redhat ansibleRange<2.9.18

[
  {
    "product": "Ansible",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in ansible 2.9.18"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Mar 2022 15:15Current

6Medium risk

Vulners AI Score6

CVSS22.1

CVSS35.5

EPSS0.0004

CWE-532