Red Hat Security Advisory

RHSA-2021:3874

Red Hat Ansible Automation Platform 2.0.1 Security and Bug fix Release

Released 2021-10-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.0 for RHEL 8 ansible-2.9.27-1.el8ap, ansible-core-2.11.6-1.el8ap, ansible-test-2.11.6-1.el8ap

Fixes 1 record

TI-2021-02566 CVE-2021-3620 · GHSA-4r65-35qq-ch8j

Information disclosure through error messages in ansible

LOW 25

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0039 Published 2022-03-03 Partial fix · 2.9.27 CWE-209