Description
A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ansible-rulebook
Default version status: unaffected
0 to < 1.1.6affected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8
Default version status: affected
0:1.0.8-2.el8ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9
Default version status: affected
0:1.0.8-2.el9ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
Default version status: affected
0:1.1.4-2.el8ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9
Default version status: affected
0:1.1.4-2.el9ap to < *unaffected