Описание
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Отчет
The Red Hat Product Security team would assess the severity of this vulnerability as Moderate, given that exploitation requires access to logs or debug output but nevertheless exposes sensitive credentials. The root cause is the lack of proper output suppression (no_log=True) for the password-containing credentials[].value structure, allowing plaintext passwords to appear in logs and increasing the risk of account compromise in environments where logs are stored, shared, or aggregated.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 5 | ansible-collection-community-general | Fix deferred | ||
| Red Hat Ceph Storage 6 | ansible-collection-community-general | Fix deferred | ||
| Red Hat Ceph Storage 7 | ansible-collection-community-general | Fix deferred | ||
| Red Hat Ceph Storage 8 | ansible-collection-community-general | Fix deferred | ||
| Red Hat OpenStack Platform 17.1 | ansible-collection-community-general | Fix deferred | ||
| Red Hat OpenStack Platform 18.0 | ansible-collection-community-general | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
A flaw was found in ansible-collection-community-general. This vulnera ...
Уязвимость ansible-collection-community-general
Ansible Community General Collection is vulnerable to exposure of sensitive information
EPSS
5.5 Medium
CVSS3