Red Hat Security AdvisoryRHSA-2021:4703
RHV Engine and Host Common Packages security update [ovirt-4.4.9]
Released 2021-11-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ansible-2.9.27-1.el8ae, ovirt-ansible-collection-1.6.5-1.el8ev
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts ansible-2.9.27-1.el8ae, ovirt-ansible-collection-1.6.5-1.el8ev
- Red Hat Virtualization 4 Tools for Red Hat Enterprise Linux 8 ovirt-ansible-collection-1.6.5-1.el8ev
Fixes 1 record
Priority LOW 25
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0039 · Published 2022-03-03 · Partial fix · 2.9.27 CWE-209
