← back
CVE-2021-20180CWE-532

CVE-2021-20180

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
exploitation probability
0.3%top 75% of all CVEs
observed exploitation
nono source reports it
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
Affected products
n/a · Ansible