CVE-2024-0690

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-117CWE-116

Affected software

VendorProductVersions
——>= 2.14.0, < 2.14.4; >= 2.15.0, < 2.15.9; >= 2.16.0, < 2.16.3
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 8—
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 8—
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 8—
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 9—
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 9—
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 9—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 9—

References

Timeline

Published
Feb 6, 2024
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-06914.8The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and includiCVE-2024-06928.8The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated uCVE-2024-06937.5A vulnerability classified as problematic was found in EFS Easy File Sharing FTP 2.0. Affected by this vulnerability is an unknown functionaCVE-2024-06955.3A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1. Affected by this issue is some unknown funCVE-2024-06966.1A vulnerability, which was classified as problematic, was found in AtroCore AtroPIM 1.8.4. This affects an unknown part of the file /#ProducCVE-2024-06974.9The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and incluCVE-2024-06985.4The Easy!Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyappointments' shortcode in allCVE-2024-06997.2The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missingCVE-2024-07005.4The Simple Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tweet this text value in all versions up to, and CVE-2024-07015.3The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the usCVE-2024-07027.3The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to missing capability checkCVE-2024-07034.8The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sticky URLs in all versi
CVE-2024-0690: Medium severity, CVSS 5.5 | Vulnix