Information disclosure in Ansible

CVE-2021-3620

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confi…

EPSS: 0.003 (52.8th percentile) — read the EPSS interpretation.

Affected products

  • N/a Ansible — versions Fixed in Ansible Engine v2.9.27

Weakness classification (CWE)

References