CVE-2024-0690
Fixed in a distro release EPSS <1%CVSS 5.0
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.
Products: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible-core | 2.14.14 |
| PyPI | ansible-core | 2.16.3 |
| PyPI | ansible-core | 2.15.9 |
| PyPI | ansible-core | 2.14.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | ansible-core | 2.16.3-2.el8 |
| AlmaLinux 8 | ansible-test | 2.16.3-2.el8 |
| AlmaLinux 9 | ansible-core | 1:2.14.14-1.el9 |
| AlmaLinux 9 | ansible-test | 1:2.14.14-1.el9 |
| Amazon Linux 2023 | ansible-core | 2.15.3-1.amzn2023.0.3 |
| Amazon Linux 2023 | ansible-test | 2.15.3-1.amzn2023.0.3 |
| Debian 12 | ansible | 5.4.0-1 |
| Debian 12 | ansible-core | 2.14.16-0+deb12u1 |
| Debian 13 | ansible | 5.4.0-1 |
| Debian 13 | ansible-core | 2.16.5-1 |
| Debian 14 | ansible | 5.4.0-1 |
| Debian 14 | ansible-core | 2.16.5-1 |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.9-1.el9ap |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.9-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-controller-venv-tower | 0:4.5.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-controller-venv-tower | 0:4.5.1-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.9-1.el9ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.9-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.9-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.9-1.el8ap |
| Red Hat Enterprise Linux 8 | ansible-core | 0:2.16.3-2.el8 |
| Red Hat Enterprise Linux 8 | ansible-test | 0:2.16.3-2.el8 |
| Red Hat Enterprise Linux 9 | ansible-core | 1:2.14.14-1.el9 |
| Red Hat Enterprise Linux 9 | ansible-test | 1:2.14.14-1.el9 |
| Rocky Linux 8 | ansible-core | 0:2.16.3-2.el8 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| SUSE Manager Client Tools 15 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools 15 | grafana | 9.5.18-150000.1.63.2 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.9-150000.1.47.2 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.27-150000.3.116.2 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.19-150000.3.89.2 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.3.6-150000.3.33.2 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.10-150000.1.39.2 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Client Tools 15-BETA | POS_Image-Graphical7 | 0.1.1710765237.46af599-159000.3.24.2 |
| SUSE Manager Client Tools 15-BETA | POS_Image-JeOS7 | 0.1.1710765237.46af599-159000.3.24.2 |
| SUSE Manager Client Tools 15-BETA | ansible | 2.9.27-159000.3.12.2 |
| SUSE Manager Client Tools 15-BETA | dracut-saltboot | 0.1.1710765237.46af599-159000.3.33.2 |
| SUSE Manager Client Tools 15-BETA | grafana | 9.5.16-159000.4.30.2 |
| SUSE Manager Client Tools 15-BETA | spacecmd | 5.0.5-159000.6.48.2 |
| SUSE Manager Client Tools 15-BETA | spacewalk-client-tools | 5.0.4-159000.6.54.2 |
| SUSE Manager Client Tools 15-BETA | supportutils-plugin-susemanager-client | 5.0.3-159000.6.21.2 |
| SUSE Manager Client Tools 15-BETA | uyuni-tools | 0.1.7-159000.3.8.1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-prometheus-node_exporter | 1.5.0-159000.6.2.1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-tools | 0.1.7-159000.3.8.1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| SUSE Manager Proxy Module 4.3 | ansible | 2.9.27-150000.1.17.2 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.12-150000.1.21.2 |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 14.04 LTS | ansible | no fix |
| Ubuntu Pro 16.04 LTS | ansible | no fix |
| Ubuntu Pro 18.04 LTS | ansible | no fix |
| Ubuntu Pro 20.04 LTS | ansible | no fix |
| Ubuntu Pro 22.04 LTS | ansible | no fix |
| openSUSE Leap 15.5 | POS_Image-Graphical7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | POS_Image-JeOS7 | 0.1.1710765237.46af599-150000.1.21.2 |
| openSUSE Leap 15.5 | ansible | 2.9.27-150000.1.17.2 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1710765237.46af599-150000.1.53.2 |
| openSUSE Leap 15.5 | golang-github-prometheus-promu | 0.14.0-150000.3.18.2 |
| openSUSE Leap 15.5 | spacecmd | 4.3.27-150000.3.116.2 |
| openSUSE Tumbleweed | ansible-core | 2.16.9-1.1 |
| openSUSE Tumbleweed | ansible-core-2.17 | 2.17.6-1.1 |
| openSUSE Tumbleweed | ansible-core-2.18 | 2.18.10-2.1 |
| openSUSE Tumbleweed | ansible-core-2.19 | 2.19.4-1.1 |
| openSUSE Tumbleweed | ansible-core-2.20 | 2.20.6-1.1 |