← Database

CVE-2021-3620

MEDIUM CVSS: 5.5 Published: 2022-03-03 Modified: 2026-06-17

Description

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

Affected Platforms

Redhat Virtualization ManagerRedhat Enterprise LinuxRedhat OpenstackRedhat Enterprise Linux For Power Little EndianRedhat Virtualization HostRedhat Virtualization For Ibm Power Little EndianRedhat VirtualizationRedhat Ansible Automation Platform Early AccessRedhat Ansible Engine

Weakness Type

CWE-209, CWE-209

References