Insertion of Sensitive Information into Log File in ansible

🗓️ 01 Jun 2021 21:53:29Reported by GitHub Advisory DatabaseType

Flaw in ansible module allows disclosure of credentials in console lo

Reporter	Title	Published	Views	Family All 91
Tenable Nessus	Amazon Linux 2 : ansible (ALAS-2021-1613)	19 Mar 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 32 : ansible (2021-9a0903469c)	2 Mar 202100:00	–	nessus
Tenable Nessus	Fedora 33 : ansible (2021-e9478617ae)	2 Mar 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : ansible (openSUSE-SU-2022:0081-1)	17 Mar 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0663)	24 Feb 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0664)	24 Feb 202100:00	–	nessus
Tenable Nessus	RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.6] (Moderate) (RHSA-2021:2180)	1 Jun 202100:00	–	nessus
Tenable Nessus	SUSE SLES15: ansible / ansible-doc / ansible-test / dracut-saltboot / etc (SUSE-SU-2022:3178-1)	9 Sep 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-20178	11 Aug 202500:00	–	nessus

Vulners

Node

ansible ansibleRange<2.9.18pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-20178
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst
github	www.github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst
lists	www.lists.debian.org/debian-lts-announce/2023/12/msg00018.html
github	www.github.com/ansible-collections/community.general/pull/1635
github	www.github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc
github	www.github.com/advisories/GHSA-wv5p-gmmv-wh9v
github	www.github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst
github	www.github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml

18 Nov 2024 16:26Current

2.2Low risk

Vulners AI Score2.2

CVSS 22.1

CVSS 3.15.5

EPSS0.00337