An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
CVE-2024-0690
CVSS base score
5.0 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-117, CWE-116
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected products
redhat ansible
redhat enterprise linux
redhat ansible automation platform
redhat ansible developer
redhat ansible inside
fedoraproject fedora
References
- access.redhat.com Vendor Advisory
- access.redhat.com
- access.redhat.com
- access.redhat.com Vendor Advisory
- bugzilla.redhat.com Issue Tracking
- github.com Issue Tracking, Patch
- access.redhat.com Vendor Advisory
- access.redhat.com
- access.redhat.com
- access.redhat.com Vendor Advisory