An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive infor
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
| Vendor | Product | Versions |
|---|---|---|
| ? | ? | 2.14.0, 2.15.0, 2.16.0 |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 1:2.15.9-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 1:2.15.9-1.el9ap |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.16.3-2.el8 |
| Red Hat | Red Hat Enterprise Linux 9 | 1:2.14.14-1.el9 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.