---

CVE-2021-20228 - log back

CVE-2021-20228 edited at 10 Feb 2021 12:36:03
References	https://bugzilla.redhat.com/show_bug.cgi?id=1925002 + https://github.com/ansible/ansible/pull/73487 + https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b

CVE-2021-20228 edited at 05 Feb 2021 08:59:10
Severity	- Unknown + Medium
Remote	- Unknown + Local
Type	- Unknown + Information disclosure
Description	+ A flaw was found in the Ansible Engine, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information.
References	+ https://bugzilla.redhat.com/show_bug.cgi?id=1925002

CVE-2021-20228 created at 05 Feb 2021 08:57:58
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes