Information Disclosure

ansible is vulnerable to information disclosure. The vulnerability exists when using the towercallback parameter from the amazon.aws.ec2instance module, allowing an attacker to handle the parameter insecurely, which leads to password leaking in the logs...

CVE-2022-3697

A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs...

CVE-2022-3697

A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs...

CVE-2022-3697

CVE-2022-3697 affects the Ansible amazon.aws collection (amazon.aws.ec2_instance module) where tower_callback is handled insecurely, allowing password leakage into logs. Multiple connected sources (Debian/Ubuntu advisories, IBM/Cloud Pak bulletins) confirm the flaw and provide remediation paths: ...

CVE-2020-15661

A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. This vulnerability affects Firefox for iOS 28...