CVE-2021-3620: falha em ansible
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.4%
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.
Produtos afetados
n/a · ansibleReferências
https://bugzilla.redhat.com/show_bug.cgi?id=1975767https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixeshttps://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html