Skip to content
OpenAdvisories
Medium RHSA-2021:3874 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.0.1 Security and Bug fix Release

Published Sep 16, 2024 · Updated Jan 28, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.0::el8 ansible 0:2.9.27-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.0::el8 ansible-core 0:2.11.6-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.0::el8 ansible-test 0:2.11.6-1.el8ap

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3620

    Ansible discloses sensitive information in traceback error message

    A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

    ansible ansible ansible ansible-core Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1975767
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3874.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3620
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3620
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3620