CVE-2021-3620
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.4%
probabilidad de explotación
0.4%top 67% de las CVE
explotación observada
noninguna fuente lo reporta
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.
Productos afectados
n/a · ansibleReferencias
https://bugzilla.redhat.com/show_bug.cgi?id=1975767https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixeshttps://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html