A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.

The version of ansible installed on the remote host is prior to 2.9.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ANSIBLE2-2023-003 advisory.

  - A flaw was found in several ansible modules, where parameters containing credentials, such as secrets,     were being logged in plain-text on managed nodes, as well as being made visible on the controller node     when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take     advantage of this information to steal those credentials, provided when they have access to the log files     containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects     Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.
    (CVE-2021-3447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3178-1 advisory.

  - A flaw was found in ansible module where credentials are disclosed in the console log by default and not     protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an     attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to     confidentiality. (CVE-2021-20178, CVE-2021-20180)

  - A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default     and not protected by no_log feature when using those modules. An attacker can take advantage of this     information to steal those credentials. The highest threat from this vulnerability is to data     confidentiality. Versions before ansible 2.9.18 are affected. (CVE-2021-20191)

  - A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not     protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows     an attacker to obtain sensitive information. The highest threat from this vulnerability is to     confidentiality. (CVE-2021-20228)

  - A flaw was found in several ansible modules, where parameters containing credentials, such as secrets,     were being logged in plain-text on managed nodes, as well as being made visible on the controller node     when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take     advantage of this information to steal those credentials, provided when they have access to the log files     containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects     Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.
    (CVE-2021-3447)

  - A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can     occur through facts used in the template if the user is trying to put templates in multi-line YAML strings     and the facts being handled do not routinely include special template characters. This flaw allows     attackers to perform command injection, which discloses sensitive information. The highest threat from     this vulnerability is to confidentiality and integrity. (CVE-2021-3583)

  - A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the     Ansible user credentials is disclosed by default in the traceback error message. The highest threat from     this vulnerability is to confidentiality. (CVE-2021-3620)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2736 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-     virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed     using a special build of Red Hat Enterprise Linux with only the packages required to host virtual     machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing     administrative tasks.

    Security Fix(es):

    * kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)

    * systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash     (CVE-2021-33910)

    * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)

    * ansible: multiple modules expose secured values (CVE-2021-3447)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * The redhat-release-virtualization-host package no longer requires vdsm-hooks. In this release, the     installation of vdsm-hooks is not mandatory for the Red Hat Virtualization Host. (BZ#1976095)

    * Previously, rhsmcertd was not enabled by default on the Red Hat Virtualization Host. As a result, the     systems did not regularly report to RHSM while the subscription-manager reported no obvious issues and     repositories were properly enabled.
    In this release, rhsmcertd is enabled by default in RHVH, and as a result, RHSM now receives reports     regularly. (BZ#1958145)

    * In this release, the Red Hat Virtualization Host has been rebased on top of the RHEL 8.4.0 Batch #1     update. For more information, see the RHEL release notes. (BZ#1957242)

    * Red Hat Virtualization Host now includes an updated scap-security-guide-rhv which allows you to apply a     PCI DSS security profile to the system during installation, (BZ#1883793)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2866 advisory.

    The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform     that allows system administrators to view and manage virtual machines. The Manager provides a     comprehensive range of features including search capabilities, resource management, live migrations, and     virtual infrastructure provisioning.

    The ovirt-ansible-hosted-engine-setup package provides an Ansible role for deploying Red Hat     Virtualization Hosted-Engine.

    Security Fix(es):

    * ansible: multiple modules expose secured values (CVE-2021-3447)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Previously, using an Ansible playbook to fetch virtual machine disk information was slow and incomplete,     while the REST API fetched the information faster and more completely.
    In this release, the Ansible playbook fetches the information completely and quickly. (BZ#1947902)

    * The ovirt-engine in RHV 4.4.7 requires an Ansible 2.9.z version later than Ansible 2.9.20.
    In addition, in RHV 4.4.7 the version limitation for a specific Ansible version has been removed, the     correct Ansible version is now shipped in the RHV subscription channels. (BZ#1966145)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1342 advisory.

    Ansible is a simple model-driven configuration management, multi-node     deployment, and remote-task execution system. Ansible works over SSH and     does not require any software or daemons to be installed on remote nodes.
    Extension modules can be written in any language and are transferred to     managed machines automatically.

    The following packages have been upgraded to a newer upstream version:
    ansible (2.9.20)

    Bug Fix(es):
    * CVE-2021-3447 ansible: multiple modules expose secured values

    See:
    https://github.com/ansible/ansible/blob/v2.9.20/changelogs/CHANGELOG-v2.9.rst     for details on bug fixes in this release.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1343 advisory.

    Ansible is a simple model-driven configuration management, multi-node     deployment, and remote-task execution system. Ansible works over SSH and     does not require any software or daemons to be installed on remote nodes.
    Extension modules can be written in any language and are transferred to     managed machines automatically.

    The following packages have been upgraded to a newer upstream version:
    ansible (2.9.20)

    Bug Fix(es):
    * CVE-2021-3447 ansible: multiple modules expose secured values

    See:
    https://github.com/ansible/ansible/blob/v2.9.20/changelogs/CHANGELOG-v2.9.rst     for details on bug fixes in this release.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
181946	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-003)	Nessus	Amazon Linux Local Security Checks	medium
164906	SUSE SLES15 : Important security update for SUSE Manager Client Tools (SUSE-SU-2022:3178-1)	Nessus	SuSE Local Security Checks	high
152003	RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.7] (Important) (RHSA-2021:2736)	Nessus	Red Hat Local Security Checks	high
152001	RHEL 8 : RHV Engine and Host Common Packages security update [ovirt-4.4.7] (Low) (RHSA-2021:2866)	Nessus	Red Hat Local Security Checks	medium
148950	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1342)	Nessus	Red Hat Local Security Checks	medium
148945	RHEL 7 / 8 : Ansible security update (2.9.20) (Moderate) (RHSA-2021:1343)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2021-3447

medium

Tenable Plugins

medium

high

high

medium

medium

medium