PT-2021-8091 · Unknown +6 · Ansible Engine +6

🗓️ 24 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 21 Views

Flaw in Ansible Engine reveals user credentials in errors, update to 2.8.16 to mitigate risk.

Reporter	Title	Published	Views	Family All 4475
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to improper authentication in Grafana (CVE-2022-39229)	1 Nov 202319:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in zlib and Golang Go may affect the IBM Spectrum Protect Server (CVE-2018-25032, CVE-2022-27664)	13 Dec 202220:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	19 Oct 202221:11	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2022-27664	1 Nov 202210:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2022	26 Jul 202207:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect Watson Explorer Foundational Components (CVE-2021-3712, CVE-2021-3711)	22 Oct 202111:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics is affected by security vulnerabilities.	22 Apr 202223:53	–	ibm
IBM Security Bulletins	Security Bulletin: Golang Go vulnerability	17 Apr 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities discovered in IBM Security Verify Access Appliance	15 Apr 202502:38	–	ibm

Source	Link
github	www.github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
osv	www.osv.dev/vulnerability/GHSA-4r65-35qq-ch8j
bdu	www.bdu.fstec.ru/vul/2024-07358
wiki	www.wiki.astralinux.ru/pages/viewpage.action
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17
osv	www.osv.dev/vulnerability/DLA-3695-1
osv	www.osv.dev/vulnerability/MGASA-2021-0487
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
bdu	www.bdu.fstec.ru/vul/2021-03706

04 May 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 46.8

CVSS 27.8

CVSS 3.19.4 - 9.8

CVSS 39.8

EPSS0.88503

SSVC