Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pfv-q6j2-pcrf

Опубликовано: 04 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A logic flaw exists in Ansible. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

A logic flaw exists in Ansible. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

EPSS

Процентиль: 22%
0.00074
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 6.3
ubuntu
больше 2 лет назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

CVSS3: 6.3
redhat
больше 2 лет назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

CVSS3: 6.3
nvd
больше 2 лет назад

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

EPSS

Процентиль: 22%
0.00074
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-532