Redhat Ansible Collection vulnerabilities

1 known vulnerability affecting redhat/ansible_collection.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-3697HIGHCVSS 7.5fixed in 2.0.0≥ 2.1.0, < 5.1.02022-10-28

CVE-2022-3697 [HIGH] CWE-233 CVE-2022-3697: A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter fro A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.