VULNERABILITY INTELLIGENCE

CVE-2023-4380

CVSS score6.3 MEDIUM
EPSS probability0.64%
CISA KEVNot currently listed
Published2023-10-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

Weakness classification

  • secalert@redhat.com: CWE-532
  • nvd@nist.gov: CWE-532

Primary references