ZeroHour

CVE-2021-20228

CVSS 3.1
7.5 high
EPSS
2%p80
Published
()
Modified
Description

A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.

Vendors
redhatdebian
Products
ansible engine, ansible automation platform, ansible tower, debian linux
Weakness
CWE-200
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.