CVE-2025-14010mediumCWE-532

CVE-2025-14010: medium-severity vulnerability in ansible-collections Ansible Community General…

Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

Published · Updated

Follow this CVE+ Monitor Red Hat OpenStack Platform+ Monitor Red Hat Ceph Storage

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
ansible-collections · Ansible Community General CollectionRed Hat · Red Hat Ceph Storage 5Red Hat · Red Hat Ceph Storage 6Red Hat · Red Hat Ceph Storage 7Red Hat · Red Hat Ceph Storage 8Red Hat · Red Hat OpenStack Platform 17.1Red Hat · Red Hat OpenStack Platform 18.0
Related CVEs — ansible-collections Ansible Community General…

In the same product, most dangerous first.

CVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2026-87874HIGHCommunity.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controllerEPSS 0.7%CVE-2025-8556LOWGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsEPSS 0.6%CVE-2026-80158MEDIUMAnsible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingsEPSS 0.1%CVE-2026-87872MEDIUMCommunity.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosureEPSS 0.1%CVE-2026-18495MEDIUMLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthroughEPSS 0.1%