VULNERABILITY INTELLIGENCE

CVE-2021-3620

CVSS score5.5 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2022-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

Weakness classification

  • secalert@redhat.com: CWE-209
  • nvd@nist.gov: CWE-209

Primary references