5.5

CVE-2024-8775: Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

Deferred
AliasesSUSE-RU-2025:0791-1GHSA-jpxc-vmjf-9fcjPYSEC-2026-1124
Published 14-09-2024Last modified 17-09-2026

Vulnerability summary

CVE-2024-8775 is a medium (CVSS 5.5) vulnerability in ansible-core. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.4% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 6
DLA-3963-1MGASA-2025-0052OPENSUSE-SU-2024:14498-1OPENSUSE-SU-2024:14499-1OPENSUSE-SU-2024:14537-1OPENSUSE-SU-2025:15638-1

Timeline

  1. 14-09-2024
    PublishedVulnerability first disclosed.
  2. 17-09-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

19%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.27% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse6 products
  • ansible&distro=SUSE Manager Client Tools 15< 2.9.27-150000.1.20.1
  • ansible&distro=SUSE Manager Proxy Module 4.3< 2.9.27-150000.1.20.1
  • spacewalk-client-tools&distro=SUSE Manager Client Tools 15< 4.3.22-150000.3.100.1
  • uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools 15< 4.3.15-150000.1.30.1
  • uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools for SLE Micro 5< 4.3.15-150000.1.30.1
Debian2 products
  • ansible< 5.4.0-1
  • ansible-core< 2.14.18-0+deb12u1 | < 2.17.5-5
Ubuntu2 products
  • ansibleAll versions (No fix recorded)
  • ansible-coreAll versions (No fix recorded)
Opensuse1 product
  • ansible&distro=openSUSE Leap 15.6< 2.9.27-150000.1.20.1
PyPI1 product
  • ansible-core< 2.16.13 | ≥ 2.17.0b1, < 2.17.6

5 vendors · 12 products

References

20 links
Show all 20 references