A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confidentiality
References
Link | Resource |
---|---|
https://github.com/ansible-collections/community.crypto/commit/233d1afc296f6770e905a1785ee2f35af7605e43 | Patch Third Party Advisory |
Configurations
Information
Published : 2020-10-29 13:15
Updated : 2020-11-03 09:41
NVD link : CVE-2020-25646
Mitre link : CVE-2020-25646
JSON object : View
CWE
CWE-116
Improper Encoding or Escaping of Output
Products Affected
ansible_collections_project
- community.crypto