CVE-2022-3697
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-3697
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3697.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-3697
- Aliases
- Downstream
- Published
- 2022-10-28T16:15:16Z
- Modified
- 2025-10-16T05:30:06.916006Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
- References
Affected packages
Git / github.com/ansible-collections/amazon.aws
Affected ranges
- Type
- GIT
- Repo
- https://github.com/ansible-collections/amazon.aws
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/ansible-collections/community.aws
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/ansible/ansible
- Events