CVSS 5.5 · Medium EPSS 0,35%
Kerentanan Insertion of Sensitive Information into Log File pada oracle virtualization, redhat ansible +6 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| oracle | virtualization | Versi 4.0 |
| redhat | ansible | Semua versi sebelum 2.8.19 |
| redhat | ansible | Versi 2.9.0 hingga sebelum 2.9.18 |
| redhat | ansible | Versi 2.10.0 hingga sebelum 2.10.7 |
| redhat | ansible tower | Versi 3.0 |
| redhat | cisco nx-os collection | Semua versi sebelum 1.4.0 |
| redhat | community general collection | Semua versi sebelum 1.3.6 |
| redhat | community general collection | Versi 2.0.0 hingga sebelum 2.0.1 |
| redhat | community network collection | Semua versi sebelum 1.3.2 |
| redhat | community network collection | Versi 2.0.0 hingga sebelum 2.0.1 |
| redhat | docker community collection | Semua versi sebelum 1.2.2 |
| redhat | google cloud platform ansible collection | Versi 1.0.2 |