CVE-2021-20228

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	ansible	ansible-engine 2.9.18

References

https://bugzilla.redhat.com/show_bug.cgi?id=1925002Issue Tracking, Third Party Advisory
https://github.com/ansible/ansible/pull/73487Patch, Third Party Advisory
https://www.debian.org/security/2021/dsa-4950Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1925002Issue Tracking, Third Party Advisory
https://github.com/ansible/ansible/pull/73487Patch, Third Party Advisory
https://www.debian.org/security/2021/dsa-4950Third Party Advisory

Timeline

Published: Apr 29, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-202294.3A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query CVE-2021-20234.7Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12 CVE-2021-202307.5A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and ve CVE-2021-202319.8A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequence CVE-2021-202329.8A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other CVE-2021-202338.2A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assum CVE-2021-202346.5An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue CVE-2021-202358.1There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its size CVE-2021-202369.8A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the CVE-2021-202377.5An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remo CVE-2021-202383.7It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from cl CVE-2021-202393.3A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to lea