Sensitive Information Disclosure

Ansible Automation Platform is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of private keys, where the ec2_key module prints the private key directly to the standard output when creating a new keypair. This flaw allows an attacker to retrieve the keys from log files, compromising the system’s confidentiality, integrity, and availability.