CVE-2023-4237

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada redhat ansible automation platform, redhat ansible collection. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's confidentiality, integrity, and availability.

Rincian

Terbit di NVD

4 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-4237 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2229979 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHBA-2023:5653
• https://access.redhat.com/errata/RHBA-2023:5666
• https://security.netapp.com/advisory/ntap-20241025-0002/