Ansible leaks password to logs

A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs...

Design/Logic Flaw

A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs...

CVE-2022-3697

CVE-2022-3697 affects the Ansible amazon.aws collection (amazon.aws.ec2_instance module) where tower_callback is handled insecurely, allowing password leakage into logs. Multiple connected sources (Debian/Ubuntu advisories, IBM/Cloud Pak bulletins) confirm the flaw and provide remediation paths: ...