A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

🗓️ 02 Oct 2025 06:11:21Reported by MicrosoftType

Flaw in amazon aws instance module leaks passwords in logs due to insecure handling of the tower callback

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities Ansibel Runner.	5 Jul 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: ICP Match 360 is vulnerable to the following CVEs	5 Jul 202319:13	–	ibm
AstraLinux	Astra Linux - уязвимость в ansible	3 May 202623:59	–	astralinux
CBLMariner	CVE-2022-3697 affecting package ansible 2.9.27-2	12 Jan 202509:15	–	cbl_mariner
Circl	CVE-2022-3697	28 Oct 202220:29	–	circl
CNNVD	Ansible 安全漏洞	25 Oct 202200:00	–	cnnvd
CVE	CVE-2022-3697	28 Oct 202200:00	–	cve
Cvelist	CVE-2022-3697	28 Oct 202200:00	–	cvelist