csaf_suse - suse-ru-2025:0791-1

SUSE-RU-2025:0791-1

Vulnerability from csaf_suse - Published: 2025-03-06 05:28 - Updated: 2025-03-06 05:28

Summary

Recommended update 4.3.15 for Multi-Linux Manager Client Tools

Notes

Title of the patch

Recommended update 4.3.15 for Multi-Linux Manager Client Tools

Description of the patch

This update fixes the following issues: ansible: - Security issues fixed: * CVE-2024-8775: Fixed issue where sensitive information stored in Ansible Vault files could be exposed in plaintext (bsc#1230601) spacewalk-client-tools: - Version 4.3.22-0 * Allow translation to wrap strings as weblate forces it * Show Source String change for translations uyuni-proxy-systemd-services: - Version 4.3.15-0 * Update to Multi-Linux Manager 4.3.15

Patchnames

SUSE-2025-791,SUSE-SLE-Manager-Tools-15-2025-791,SUSE-SLE-Manager-Tools-For-Micro-5-2025-791,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2025-791,openSUSE-SLE-15.6-2025-791

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Recommended update 4.3.15 for Multi-Linux Manager Client Tools",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update fixes the following issues:\n\nansible:\n\n- Security issues fixed:\n  * CVE-2024-8775: Fixed issue where sensitive information stored in Ansible Vault files\n    could be exposed in plaintext (bsc#1230601)\n\nspacewalk-client-tools:\n\n- Version 4.3.22-0\n  * Allow translation to wrap strings as weblate forces it\n  * Show Source String change for translations\n\nuyuni-proxy-systemd-services:\n\n- Version 4.3.15-0\n  * Update to Multi-Linux Manager 4.3.15\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-791,SUSE-SLE-Manager-Tools-15-2025-791,SUSE-SLE-Manager-Tools-For-Micro-5-2025-791,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2025-791,openSUSE-SLE-15.6-2025-791",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2025_0791-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-RU-2025:0791-1",
        "url": "https://www.suse.com/support/update/announcement//suse-ru-20250791-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-RU-2025:0791-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-March/038632.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1230601",
        "url": "https://bugzilla.suse.com/1230601"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-8775 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-8775/"
      }
    ],
    "title": "Recommended update 4.3.15 for Multi-Linux Manager Client Tools",
    "tracking": {
      "current_release_date": "2025-03-06T05:28:17Z",
      "generator": {
        "date": "2025-03-06T05:28:17Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-RU-2025:0791-1",
      "initial_release_date": "2025-03-06T05:28:17Z",
      "revision_history": [
        {
          "date": "2025-03-06T05:28:17Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-2.9.27-150000.1.20.1.noarch",
                "product": {
                  "name": "ansible-2.9.27-150000.1.20.1.noarch",
                  "product_id": "ansible-2.9.27-150000.1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-doc-2.9.27-150000.1.20.1.noarch",
                "product": {
                  "name": "ansible-doc-2.9.27-150000.1.20.1.noarch",
                  "product_id": "ansible-doc-2.9.27-150000.1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-test-2.9.27-150000.1.20.1.noarch",
                "product": {
                  "name": "ansible-test-2.9.27-150000.1.20.1.noarch",
                  "product_id": "ansible-test-2.9.27-150000.1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
                  "product_id": "python3-spacewalk-check-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
                  "product_id": "python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
                  "product_id": "python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-check-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "spacewalk-check-4.3.22-150000.3.100.1.noarch",
                  "product_id": "spacewalk-check-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
                  "product_id": "spacewalk-client-setup-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
                "product": {
                  "name": "spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
                  "product_id": "spacewalk-client-tools-4.3.22-150000.3.100.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
                "product": {
                  "name": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
                  "product_id": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Client Tools 15",
                "product": {
                  "name": "SUSE Manager Client Tools 15",
                  "product_id": "SUSE Manager Client Tools 15"
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Client Tools for SLE Micro 5",
                "product": {
                  "name": "SUSE Manager Client Tools for SLE Micro 5",
                  "product_id": "SUSE Manager Client Tools for SLE Micro 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-manager-tools-micro:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy Module 4.3",
                "product": {
                  "name": "SUSE Manager Proxy Module 4.3",
                  "product_id": "SUSE Manager Proxy Module 4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.9.27-150000.1.20.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-doc-2.9.27-150000.1.20.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-doc-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-check-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-check-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:spacewalk-check-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "spacewalk-check-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-setup-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-tools-4.3.22-150000.3.100.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.22-150000.3.100.1.noarch"
        },
        "product_reference": "spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch as component of SUSE Manager Client Tools 15",
          "product_id": "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch"
        },
        "product_reference": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5",
          "product_id": "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch"
        },
        "product_reference": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools for SLE Micro 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.9.27-150000.1.20.1.noarch as component of SUSE Manager Proxy Module 4.3",
          "product_id": "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-doc-2.9.27-150000.1.20.1.noarch as component of SUSE Manager Proxy Module 4.3",
          "product_id": "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-doc-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch as component of SUSE Manager Proxy Module 4.3",
          "product_id": "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch"
        },
        "product_reference": "uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
        "relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.9.27-150000.1.20.1.noarch as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:ansible-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-doc-2.9.27-150000.1.20.1.noarch as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:ansible-doc-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-doc-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-test-2.9.27-150000.1.20.1.noarch as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:ansible-test-2.9.27-150000.1.20.1.noarch"
        },
        "product_reference": "ansible-test-2.9.27-150000.1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-8775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.20.1.noarch",
          "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.20.1.noarch",
          "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:spacewalk-check-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
          "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
          "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
          "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.20.1.noarch",
          "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.20.1.noarch",
          "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
          "openSUSE Leap 15.6:ansible-2.9.27-150000.1.20.1.noarch",
          "openSUSE Leap 15.6:ansible-doc-2.9.27-150000.1.20.1.noarch",
          "openSUSE Leap 15.6:ansible-test-2.9.27-150000.1.20.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-8775",
          "url": "https://www.suse.com/security/cve/CVE-2024-8775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1230601 for CVE-2024-8775",
          "url": "https://bugzilla.suse.com/1230601"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-check-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "openSUSE Leap 15.6:ansible-2.9.27-150000.1.20.1.noarch",
            "openSUSE Leap 15.6:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "openSUSE Leap 15.6:ansible-test-2.9.27-150000.1.20.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-check-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.22-150000.3.100.1.noarch",
            "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.15-150000.1.30.1.noarch",
            "openSUSE Leap 15.6:ansible-2.9.27-150000.1.20.1.noarch",
            "openSUSE Leap 15.6:ansible-doc-2.9.27-150000.1.20.1.noarch",
            "openSUSE Leap 15.6:ansible-test-2.9.27-150000.1.20.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-06T05:28:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-8775"
    }
  ]
}

CVE-2024-8775 (GCVE-0-2024-8775)

Vulnerability from cvelistv5 – Published: 2024-09-14 02:15 – Updated: 2025-11-06 23:17

Title

Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

Summary

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.

Severity ?

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2024:10762	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:8969	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:9894	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2025:1249	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-8775	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2312119	issue-trackingx_refsource_REDHAT
	https://github.com/advisories/GHSA-jpxc-vmjf-9fcj

Impacted products

Vendor

Product

Version

Affected: 1.0.0 , ≤ 2.17.4 (semver)

Red Hat	Ansible Automation Platform Execution Environments	Unaffected: 3.0.1-96 , < * (rpm) cpe:/a:redhat:ansible_core:2::el8 cpe:/a:redhat:ansible_core:2::el9
Red Hat	Ansible Automation Platform Execution Environments	Unaffected: 3.0.1-95 , < * (rpm) cpe:/a:redhat:ansible_core:2::el8 cpe:/a:redhat:ansible_core:2::el9
Red Hat	Ansible Automation Platform Execution Environments	Unaffected: 2.9.27-32 , < * (rpm) cpe:/a:redhat:ansible_core:2::el8 cpe:/a:redhat:ansible_core:2::el9
Red Hat	Ansible Automation Platform Execution Environments	Unaffected: 2.14.13-21 , < * (rpm) cpe:/a:redhat:ansible_core:2::el8 cpe:/a:redhat:ansible_core:2::el9
Red Hat	Ansible Automation Platform Execution Environments	Unaffected: 2.17.6-2 , < * (rpm) cpe:/a:redhat:ansible_core:2::el8 cpe:/a:redhat:ansible_core:2::el9
Red Hat	Discovery 1 for RHEL 9	Unaffected: 1.12.0-1 , < * (rpm) cpe:/o:redhat:discovery:1.0::el9
Red Hat	Discovery 1 for RHEL 9	Unaffected: 1.12.0-1 , < * (rpm) cpe:/o:redhat:discovery:1.0::el9
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 8	Unaffected: 1:2.15.13-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 1:2.15.13-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 1:2.16.13-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 1:2.16.13-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	cpe:/a:redhat:enterprise_linux_ai:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8775",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-16T14:21:23.423396Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-16T14:29:01.960Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:33:00.432Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/ansible/ansible",
          "defaultStatus": "unaffected",
          "packageName": "ansible-core",
          "versions": [
            {
              "lessThanOrEqual": "2.17.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2::el8",
            "cpe:/a:redhat:ansible_core:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ansible-builder-rhel8",
          "product": "Ansible Automation Platform Execution Environments",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3.0.1-96",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2::el8",
            "cpe:/a:redhat:ansible_core:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ansible-builder-rhel9",
          "product": "Ansible Automation Platform Execution Environments",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3.0.1-95",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2::el8",
            "cpe:/a:redhat:ansible_core:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-29-rhel8",
          "product": "Ansible Automation Platform Execution Environments",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.9.27-32",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2::el8",
            "cpe:/a:redhat:ansible_core:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel8",
          "product": "Ansible Automation Platform Execution Environments",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.14.13-21",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_core:2::el8",
            "cpe:/a:redhat:ansible_core:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform/ee-minimal-rhel9",
          "product": "Ansible Automation Platform Execution Environments",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "2.17.6-2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/o:redhat:discovery:1.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-server-rhel9",
          "product": "Discovery 1 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.12.0-1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/o:redhat:discovery:1.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-ui-rhel9",
          "product": "Discovery 1 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1.12.0-1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-core",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.15.13-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-core",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.15.13-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-core",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.16.13-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-core",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1:2.16.13-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-core",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux_ai:1"
          ],
          "defaultStatus": "affected",
          "packageName": "rhelai1/bootc-nvidia-rhel9",
          "product": "Red Hat Enterprise Linux AI (RHEL AI)",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-09-13T08:35:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-06T23:17:04.821Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:10762",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:10762"
        },
        {
          "name": "RHSA-2024:8969",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:8969"
        },
        {
          "name": "RHSA-2024:9894",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:9894"
        },
        {
          "name": "RHSA-2025:1249",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:1249"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-8775"
        },
        {
          "name": "RHBZ#2312119",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312119"
        },
        {
          "url": "https://github.com/advisories/GHSA-jpxc-vmjf-9fcj"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-09-13T08:31:27.781000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-09-13T08:35:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Ansible-core: exposure of sensitive information in ansible vault files due to improper logging",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-532: Insertion of Sensitive Information into Log File"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-8775",
    "datePublished": "2024-09-14T02:15:14.907Z",
    "dateReserved": "2024-09-13T09:06:07.367Z",
    "dateUpdated": "2025-11-06T23:17:04.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

SUSE-RU-2025:0791-1

CVE-2024-8775 (GCVE-0-2024-8775)

Tags

Sightings

Nomenclature