Red Hat Security Advisory

RHSA-2021:3871

Ansible security and bug fix update (2.9.27)

Released 2021-10-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Engine 2.9 for RHEL 7 Server ansible-2.9.27-1.el7ae, ansible-test-2.9.27-1.el7ae
Red Hat Ansible Engine 2.9 for RHEL 8 ansible-2.9.27-1.el8ae, ansible-test-2.9.27-1.el8ae

Fixes 1 record

TI-2021-02566 CVE-2021-3620 · GHSA-4r65-35qq-ch8j

Information disclosure through error messages in ansible

LOW 25

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0039 Published 2022-03-03 Partial fix · 2.9.27 CWE-209