Lucene search
K

15 matches found

Snyk
Snyk
added 2025/09/26 9:31 a.m.2 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the Connection module. An attacker can access sensitive connection details by using READ permissions through both the API and the UI due to the regression that allows to bypass the...

7.1CVSS6.7AI score0.00882EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-3620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/11/28 7:15 p.m.2 views

CVE-2023-48121

An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers t...

5.3CVSS5.8AI score0.00832EPSS
Exploits0References4
Prion
Prion
added 2023/11/28 7:15 p.m.12 views

Authentication flaw

An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers t...

5CVSS7AI score0.00832EPSS
Exploits0References3
CVE
CVE
added 2023/11/28 12:0 a.m.64 views

CVE-2023-48121

CVE-2023-48121 is an authentication bypass in the Ezviz Direct Connection Module affecting Ezviz CS-C6N-xxx, CS-CV310-xxx, CS-C6CN-xxx, and CS-C3N-xxx prior to v5.3.x build 20230401. Remote attackers can obtain sensitive information by sending crafted messages to affected devices. The vulnerabili...

5.3CVSS5.3AI score0.00832EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/11/28 12:0 a.m.18 views

CVE-2023-48121

An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers t...

5.6AI score0.00832EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:48 a.m.2 views

SUSE CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

6.5CVSS8.9AI score0.00384EPSS
Exploits0References7
OSV
OSV
added 2022/03/03 7:15 p.m.1 views

DEBIAN-CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References1
CVE
CVE
added 2022/03/03 6:23 p.m.250 views

CVE-2021-3620

CVE-2021-3620 is a disclosure vulnerability in Ansible Engine's ansible-connection module where sensitive information such as the Ansible user credentials is exposed in traceback messages. The issue is documented across multiple sources (IBM Spectrum Fusion HCI bulletin, Debian LTS advisory, and ...

5.5CVSS5.3AI score0.00384EPSS
Exploits0References4Affected Software9
RedHat Linux
RedHat Linux
added 2021/11/16 2:23 p.m.3 views

Ansible: ansible-connection module discloses sensitive info in traceback error message

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/14 8:21 p.m.3 views

Ansible: ansible-connection module discloses sensitive info in traceback error message

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/14 7:43 p.m.7 views

Ansible: ansible-connection module discloses sensitive info in traceback error message

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/14 7:42 p.m.6 views

Ansible: ansible-connection module discloses sensitive info in traceback error message

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/13 12:0 a.m.41 views

FreeBSD : Ansible -- Ansible user credentials disclosure in ansible-connection module (9a8514f3-2ab8-11ec-b3a1-8c164582fbac)

Red Hat reports : A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality. %NASLMINLEVEL 70300 C Tenabl...

5.5CVSS7AI score0.00384EPSS
Exploits0References6
securityvulns
securityvulns
added 2010/05/25 12:0 a.m.36 views

MKPortal speed connection module Vulnerability

============================================== MKPortal speed connection module Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 /' /' / /' 0 /, // ,/ / 1 // /' / // /' / /' 0 / / / / / / 1 / / 0 ////// // //...

1.8AI score
Exploits0
Rows per page
Query Builder