Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-3697

Опубликовано: 25 окт. 2022
Источник: redhat
CVSS3: 5.7
EPSS Низкий

Описание

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Ansible Automation Platform 2ansible-automation-platform-24/ee-supported-rhel9Affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-233
https://bugzilla.redhat.com/show_bug.cgi?id=2137664ansible: improper handling of tower_callback parameter in amazon.aws collection

EPSS

Процентиль: 32%
0.00122
Низкий

5.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

CVSS3: 7.5
nvd
около 3 лет назад

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

CVSS3: 7.5
msrc
4 месяца назад

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

CVSS3: 7.5
debian
около 3 лет назад

A flaw was found in Ansible in the amazon.aws collection when using th ...

CVSS3: 7.5
github
около 3 лет назад

Ansible leaks password to logs

EPSS

Процентиль: 32%
0.00122
Низкий

5.7 Medium

CVSS3