CVE-2021-20180 log

Source
Severity Medium
Remote No
Type Information disclosure
Description
A flaw was found in ansible-collection where credentials such as secrets are being disclosed in console log by default and not protected by secured feature when using bitbucket_pipeline_variable module. An attacker can take advantage of this information to steal bitbucket_pipeline credentials.
Group Package Affected Fixed Severity Status Ticket
AVG-1437 ansible 2.10.5-1 Medium Vulnerable
References
https://bugzilla.redhat.com/show_bug.cgi?id=1915808
https://github.com/ansible-collections/community.general/pull/1635
https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc