CVE-2025-14010
Fixed in a distro release EPSS <1%CVSS 5.5
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Products: ansible-collections Ansible Community General Collection, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Ceph Storage 7, Red Hat Ceph Storage 8, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 12.2.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | ansible | 8.3.0-1.amzn2023.0.2 |
| Debian 13 | ansible | 12.0.0+dfsg-0+deb13u1 |
| Debian 14 | ansible | 12.2.0+dfsg-1 |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 14.04 LTS | ansible | no fix |
| Ubuntu Pro 16.04 LTS | ansible | no fix |
| Ubuntu Pro 18.04 LTS | ansible | no fix |
| Ubuntu Pro 20.04 LTS | ansible | no fix |
| Ubuntu Pro 22.04 LTS | ansible | no fix |