Skip to content
Submit incident
AII-1002-45149
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Ansible-core CVE-2024-8775: Sensitive information exposure in vault files

Ansible-core contained a vulnerability that exposed sensitive information in Ansible Vault files through improper logging. Red Hat issued security advisories and updates to address the vulnerability.

14 September 2024 Β· Ansible Β· Privacy and surveillance
14 September 2024
AII-1002-45149View source β†—
Quick facts
Category
Privacy and surveillance
Source
access.redhat.com
Date
14 September 2024
Drafted by
Raidu Incident Detection

What happened

Ansible-core contained a vulnerability (CVE-2024-8775) that exposed sensitive information in Ansible Vault files due to improper logging.

Classification

Category
Privacy and surveillance
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
Failure modes
Data leak

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

access.redhat.com
https://access.redhat.com/errata/RHSA-2024:10762