Lucene search

Ansible discloses sensitive information in traceback error message

🗓️ 04 Mar 2022 00:17:00Reported by GitHub Advisory DatabaseType

Ansible vulnerability discloses sensitive data

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 61
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.27) (Important) (RHSA-2021:3871)	15 Oct 202100:00	–	nessus
Tenable Nessus	RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.9] (Important) (RHSA-2021:4703)	18 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.27) (Important) (RHSA-2021:3872)	15 Oct 202100:00	–	nessus
Tenable Nessus	CentOS 9 : ansible-core-2.14.2-4.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Ansible Automation Platform 2.0.1 Security and Bug fix Release (Important) (RHSA-2021:3874)	28 Apr 202400:00	–	nessus
Tenable Nessus	FreeBSD : Ansible -- Ansible user credentials disclosure in ansible-connection module (9a8514f3-2ab8-11ec-b3a1-8c164582fbac)	13 Oct 202100:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Ansible vulnerabilities (USN-5315-1)	16 Oct 202300:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.9] 0-day (Important) (RHSA-2021:4750)	20 Nov 202100:00	–	nessus
Tenable Nessus	SUSE SLES15 : Important security update for SUSE Manager Client Tools (SUSE-SU-2022:3178-1)	9 Sep 202200:00	–	nessus
Tenable Nessus	Debian dla-3695 : ansible - security update	22 Jan 202500:00	–	nessus

Vulners

Node

ansible ansibleRange<2.9.27

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3620
github	www.github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst
github	www.github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml
access	www.access.redhat.com/errata/RHSA-2021:3871
access	www.access.redhat.com/errata/RHSA-2021:3872
access	www.access.redhat.com/errata/RHSA-2021:3874
access	www.access.redhat.com/errata/RHSA-2021:4703
access	www.access.redhat.com/errata/RHSA-2021:4750

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Mar 2022 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS22.1

CVSS35.5

EPSS0.00228

SSVC

CWE-209