Skip to content
OpenAdvisories
Medium RHSA-2021:4703 1 CVE

Red Hat Security Advisory: RHV Engine and Host Common Packages security update [ovirt-4.4.9]

Published Sep 16, 2024 · Updated Jan 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 ansible 0:2.9.27-1.el8ae
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 ovirt-ansible-collection 0:1.6.5-1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ansible 0:2.9.27-1.el8ae
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-ansible-collection 0:1.6.5-1.el8ev

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-3620

    Ansible discloses sensitive information in traceback error message

    A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

    ansible ansible ansible ansible-core Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1947709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1975767
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2003671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2010670
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4703.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3620
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3620
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3620