CVE-2024-0690Medium· 5.0▾ SunlitAn information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
ansible >= 2.14.0 < 2.14.4ansible >= 2.15.0 < 2.15.9ansible >= 2.16.0 < 2.16.3ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)ansible-core (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Explicitly setting 'no_log' within the playbook will prevent the output from containing potentially sensitive information.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87859Medium· 5.3morgan is an HTTP request logger middleware for Node.js
CVE-2023-5115Medium· 6.3Ansible symlink attack vulnerability
CVE-2021-20180Medium· 5.5Insertion of Sensitive Information into Log File in ansible
CVE-2022-3697High· 7.5Ansible leaks password to logs
CVE-2025-14010Medium· 5.5Ansible Community General Collection is vulnerable to exposure of sensitive information
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail