DEBIAN-CVE-2024-0690

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2024-0690
Published: 06 Feb 2024, 12:15
Last modified:28 Apr 2026, 20:27

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Feb 2024, 12:15
Published
Vulnerability first disclosed
28 Apr 2026, 20:27
Last Modified
Vulnerability information updated

Description

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Systems

  • debian•ansible

    < 2.10.7+merged+base+2.10.17+dfsg-0+deb11u1 | < 5.4.0-1 | < 5.4.0-1 | < 5.4.0-1

  • debian•ansible-core

    < 2.14.16-0+deb12u1 | < 2.16.5-1 | < 2.16.5-1

References (1)