A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.

The version of ansible installed on the remote host is prior to 2.9.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ANSIBLE2-2023-003 advisory.

  - A flaw was found in several ansible modules, where parameters containing credentials, such as secrets,     were being logged in plain-text on managed nodes, as well as being made visible on the controller node     when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take     advantage of this information to steal those credentials, provided when they have access to the log files     containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects     Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.
    (CVE-2021-3447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3178-1 advisory.

  - A flaw was found in ansible module where credentials are disclosed in the console log by default and not     protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an     attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to     confidentiality. (CVE-2021-20178, CVE-2021-20180)

  - A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default     and not protected by no_log feature when using those modules. An attacker can take advantage of this     information to steal those credentials. The highest threat from this vulnerability is to data     confidentiality. Versions before ansible 2.9.18 are affected. (CVE-2021-20191)

  - A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not     protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows     an attacker to obtain sensitive information. The highest threat from this vulnerability is to     confidentiality. (CVE-2021-20228)

  - A flaw was found in several ansible modules, where parameters containing credentials, such as secrets,     were being logged in plain-text on managed nodes, as well as being made visible on the controller node     when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take     advantage of this information to steal those credentials, provided when they have access to the log files     containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects     Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.
    (CVE-2021-3447)

  - A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can     occur through facts used in the template if the user is trying to put templates in multi-line YAML strings     and the facts being handled do not routinely include special template characters. This flaw allows     attackers to perform command injection, which discloses sensitive information. The highest threat from     this vulnerability is to confidentiality and integrity. (CVE-2021-3583)

  - A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the     Ansible user credentials is disclosed by default in the traceback error message. The highest threat from     this vulnerability is to confidentiality. (CVE-2021-3620)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2736 advisory.

  - ansible: multiple modules expose secured values (CVE-2021-3447)

  - kernel: race condition for removal of the HCI controller (CVE-2021-32399)

  - kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)

  - kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)

  - systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash     (CVE-2021-33910)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2866 advisory.

  - ansible: multiple modules expose secured values (CVE-2021-3447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1342 advisory.

  - ansible: multiple modules expose secured values (CVE-2021-3447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1343 advisory.

  - ansible: multiple modules expose secured values (CVE-2021-3447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
181946	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-003)	Nessus	Amazon Linux Local Security Checks	medium
164906	SUSE SLES15 : Important security update for SUSE Manager Client Tools (SUSE-SU-2022:3178-1)	Nessus	SuSE Local Security Checks	high
152003	RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.7] (Important) (RHSA-2021:2736)	Nessus	Red Hat Local Security Checks	high
152001	RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.7] (Low) (RHSA-2021:2866)	Nessus	Red Hat Local Security Checks	medium
148950	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1342)	Nessus	Red Hat Local Security Checks	medium
148945	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1343)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-3447

medium

Tenable Plugins

medium

high

high

medium

medium

medium