Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-3697

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advan

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ansible, ansible community.aws, ansible amazon.aws

  • ansible from 2.5.0 before 2.10affected
  • ansible community.aws before 2.0.0affected
  • ansible amazon.aws from 2.1.0 before 5.1.0affected

References