Lucene search
PRIOn knowledge basePRION:CVE-2022-3697HistoryOct 28, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-10-2816:15:00
PRIOn knowledge base
www.prio-n.com
6
flaw
ansible
amazon.aws
logic flaw
password leakage
nvd
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ansible | ge | 2.5.0 | |
| ansible | lt | 2.10.0 | |
| ansible_collection | lt | 2.0.0 | |
| ansible_collection | ge | 2.1.0 | |
| ansible_collection | lt | 5.1.0 |
Related
osv
osv
CVE-2022-3697
2022-10-28 16:15:16
Ansible leaks password to logs
2022-10-28 19:00:38
ansible vulnerabilities
2024-06-25 11:07:42
cve
cve
CVE-2022-3697
2022-10-28 16:15:16
veracode
veracode
Information Disclosure
2022-12-05 11:40:37
github
github
Ansible leaks password to logs
2022-10-28 19:00:38
cvelist
cvelist
CVE-2022-3697
2022-10-28 00:00:00
debiancve
debiancve
CVE-2022-3697
2022-10-28 16:15:16
ubuntucve
ubuntucve
CVE-2022-3697
2022-10-28 00:00:00
nvd
nvd
CVE-2022-3697
2022-10-28 16:15:16
redhatcve
redhatcve
CVE-2022-3697
2022-10-26 14:53:02
cbl_mariner
cbl_mariner
CVE-2022-3697 affecting package ansible 2.9.27-2
2024-07-01 03:08:30
openvas
openvas
Ubuntu: Security Advisory (USN-6846-1)
2024-06-26 00:00:00
Debian: Security Advisory (DLA-3695-1)
2024-01-12 00:00:00
ubuntu
ubuntu
Ansible vulnerabilities
2024-06-25 00:00:00
nessus
nessus
rosalinux
rosalinux
Advisory ROSA-SA-2024-2334
2024-01-30 08:40:29
ibm
ibm
debian
debian
[SECURITY] [DLA 3695-1] ansible security update
2023-12-28 17:44:01