Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
CVSS Information
N/A
Vulnerability Type
通过日志文件的信息暴露
Vulnerability Title
Red Hat Ansible 日志信息泄露漏洞
Vulnerability Description
Red Hat Ansible是美国红帽（Red Hat）公司的一款计算机系统配置管理器。该产品可用于发布、管理和编排计算机系统。 Red Hat Ansible collection 存在日志信息泄露漏洞，该漏洞源于程序默认情况下会在控制台日志中公开诸如机密之类的凭据，并且在使用bitbucket_pipeline_variable模块时不受安全功能的保护。攻击者可以利用该漏洞窃取bitbucket_pipeline凭据。
CVSS Information
N/A
Vulnerability Type
N/A