ID CVE-2021-3447
Summary A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:ansible_tower:-:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:-:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:1.4.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:1.4.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.2.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.2.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.3.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.3.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.3.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.3.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:2.4.5:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:2.4.5:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.0.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.5:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.6:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.7:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.1.8:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.1:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.2:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.3:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.4:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.5:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.6:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.7:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.2.8:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:-:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:-:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:scm_repositories:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.0:*:*:*:scm_repositories:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible_tower:3.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible_tower:3.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.01:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.01:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ansible:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ansible:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 28-12-2023 - 19:15)
Impact:
Exploitability:
CWE CWE-532
CAPEC
  • Fuzzing and observing application log data/errors for application mapping
    An attacker sends random, malformed, or otherwise unexpected messages to a target application and observes the application's log or error messages returned. Fuzzing techniques involve sending random or malformed messages to a target and monitoring the target's response. The attacker does not initially know how a target will respond to individual messages but by attempting a large number of message variants they may find a variant that trigger's desired behavior. In this attack, the purpose of the fuzzing is to observe the application's log and error messages, although fuzzing a target can also sometimes cause the target to enter an unstable state, causing a crash. By observing logs and error messages, the attacker can learn details about the configuration of the target application and might be able to cause the target to disclose sensitive information.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
Last major update 28-12-2023 - 19:15
Published 01-04-2021 - 18:15
Last modified 28-12-2023 - 19:15
Back to Top