CVE-2024-8775
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Ansible has a flaw where sensitive information stored in Ansible Vault files can be exposed in plaintext during playbook execution. This occurs when using tasks like include_vars without the no_log: true parameter, causing sensitive data to be printed in output or logs.
Risk Assessment
Risk of disclosure of passwords, API keys, and other secrets, potentially leading to unauthorized access.
Recommendation
Ensure that when loading vaulted variables you set no_log: true, and review playbooks for potential leaks.
Other vulnerabilities in Ansible
See allOriginal NVD description (English source)
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.