Skip to content
OpenAdvisories
Medium RHSA-2021:3871 1 CVE

Red Hat Security Advisory: Ansible security and bug fix update (2.9.27)

Published Sep 16, 2024 · Updated Jan 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Engine 2 ansible_engine:2.9::el7 ansible 0:2.9.27-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el7 ansible-test 0:2.9.27-1.el7ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el8 ansible 0:2.9.27-1.el8ae
Red Hat · Ansible Engine 2 ansible_engine:2.9::el8 ansible-test 0:2.9.27-1.el8ae

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3620

    Ansible discloses sensitive information in traceback error message

    A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

    ansible ansible ansible ansible-core Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1975767
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3871.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3620
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3620
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3620