UBUNTU-CVE-2024-0690
Dashboard / Vulnerabilities / UBUNTU-CVE-2024-0690
Summary:
Details: An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
References: https://ubuntu.com/security/CVE-2024-0690, https://github.com/ansible/ansible/pull/82565, https://github.com/ansible/ansible/commit/beb04bc2642c208447c5a936f94310528a1946b1, https://www.cve.org/CVERecord?id=CVE-2024-0690
Affected packages
Package
Name: ansible
Purl: pkg:deb/ubuntu/ansible?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
1.1+dfsg-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
