Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-0690

Опубликовано: 18 янв. 2024
Источник: redhat
CVSS3: 5
EPSS Низкий

Описание

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

Меры по смягчению последствий

Explicitly setting 'no_log' within the playbook will prevent the output from containing potentially sensitive information.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-117
https://bugzilla.redhat.com/show_bug.cgi?id=2259013ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration

EPSS

Процентиль: 17%
0.00055
Низкий

5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5
ubuntu
почти 2 года назад

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

CVSS3: 5
nvd
почти 2 года назад

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

CVSS3: 5.5
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 5
debian
почти 2 года назад

An information disclosure flaw was found in ansible-core due to a fail ...

rocky
6 месяцев назад

Moderate: ansible-core bug fix, enhancement, and security update

EPSS

Процентиль: 17%
0.00055
Низкий

5 Medium

CVSS3