Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pfv-q6j2-pcrf

Опубликовано: 04 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A logic flaw exists in Ansible. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

A logic flaw exists in Ansible. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

EPSS

Процентиль: 48%
0.00636
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 3 года назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

CVSS3: 6.3
redhat
около 3 лет назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

CVSS3: 6.3
nvd
почти 3 года назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

EPSS

Процентиль: 48%
0.00636
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-532