CVE-2021-20191

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-20191
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-20191.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-20191
Aliases
Downstream
Related
Published
2021-05-26T21:15:08Z
Modified
2025-10-14T17:58:27.645415Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.

References

Affected packages

Git / github.com/ansible-collections/cisco.nxos

Affected ranges

Type
GIT
Repo
https://github.com/ansible-collections/cisco.nxos
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/ansible-collections/community.docker
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/ansible-collections/community.general
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/ansible-collections/community.network
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/ansible-collections/google.cloud
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/ansible/ansible
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

0.*

0.0.1
0.0.2
0.0.3
0.01
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.3
0.7

1.*

1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5

v0.*

v0.0.3
v0.0.3.1
v0.0.4
v0.0.5
v0.0.6
v0.0.7
v0.0.8
v0.0.9
v0.10.0
v0.10.1
v0.10.2
v0.10.3

v1.*

v1.0
v1.0.1
v1.1
v1.1.0
v1.1.0-beta
v1.1.0-beta.1
v1.1.1
v1.1.2
v1.1.3
v1.2
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.5.1
v1.6.0

Other

v1_last

v2.*

v2.0.0-0.1.alpha1
v2.0.0-0.2.alpha2
v2.0.0-0.3.beta1
v2.0.0-0.4.beta2
v2.0.0-0.5.beta3
v2.6.0a1
v2.7.0.a1
v2.8.0
v2.8.0a1
v2.8.0b1
v2.8.0rc1
v2.8.0rc2
v2.8.0rc3
v2.8.1
v2.8.10
v2.8.11
v2.8.12
v2.8.13
v2.8.14
v2.8.15
v2.8.16
v2.8.16rc1
v2.8.17
v2.8.17rc1
v2.8.18
v2.8.18rc1
v2.8.19rc1
v2.8.2
v2.8.3
v2.8.4
v2.8.5
v2.8.6
v2.8.7
v2.8.8
v2.8.9