CVE-2024-0690
CVSS V2 None
CVSS V3 None
Description
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
Overview
- CVE ID
- CVE-2024-0690
- Assigner
- redhat
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-02-06T12:00:28.505Z
- Last Modified Date
- 2024-05-29T23:26:36.215Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:0733 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:2246 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:3043 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/security/cve/CVE-2024-0690 | vdb-entry x_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2259013 | issue-tracking x_refsource_REDHAT |
| https://github.com/ansible/ansible/pull/82565 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-0690 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0690 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 10:07:43 | Added to TrackCVE |