CVE-2021-3620

Published: Mar 3, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

Affected (10)

Products: Redhat: Ansible Automation Platform Early Access, Ansible Engine, Enterprise Linux, Enterprise Linux For Power Little Endian, Openstack, Virtualization, Virtualization For Ibm Power Little Endian, Virtualization Host, Virtualization Manager

Redhat

9 products

Ansible Automation Platform Early Access

Ansible Engine

Enterprise Linux

Enterprise Linux For Power Little Endian

Openstack

Virtualization

Virtualization For Ibm Power Little Endian

Virtualization Host

Virtualization Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Redhat Ansible Automation Platform Early Access	Version 2.0
Redhat Ansible Engine	Before 2.9.27
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Openstack	Version 16.1
Redhat Openstack	Version 1
Redhat Virtualization	Version 4.0
Redhat Virtualization For Ibm Power Little Endian	Version 4.0
Redhat Virtualization Host	Version 4.0
Redhat Virtualization Manager	Version 4.4