CVE-2021-3620
Dashboard / Vulnerabilities / CVE-2021-3620
CVE-2021-3620
Published: 3 Mar 2022Last Modified: 7 Aug 2026
Summary:
Details: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.
References: https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html, https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes, https://bugzilla.redhat.com/show_bug.cgi?id=1975767, https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
Affected packages
Package
Name:
Purl:
Affected ranges
Affected versions
v2.9.27rc1
v2.9.26
v2.9.26rc1
v2.9.25
v2.9.25rc1
v2.9.24
v2.9.24rc1
v2.9.23
v2.9.23rc1
v2.9.22
v2.9.22rc1
v2.9.21
v2.9.21rc1
v2.9.20
v2.9.20rc1
v2.9.19
v2.9.19rc1
v2.9.18
v2.9.18rc1
v2.9.17
v2.9.17rc1
v2.9.16
v2.9.16rc1
v2.9.15
v2.9.15rc1
v2.9.14
v2.9.14rc1
v2.9.13
v2.9.12
v2.9.11
v2.9.10
v2.9.9
v2.9.8
v2.9.7
v2.9.6
v2.9.5
v2.9.4
v2.9.3
v2.9.2
v2.9.1
v2.9.0
v2.9.0rc5
v2.9.0rc4
v2.9.0rc3
v2.9.0rc2
v2.9.0rc1
v2.9.0b1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
