vulnerability
SUSE: CVE-2021-20180: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | 2021-06-22 | 2022-03-18 | 2022-10-26 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
2021-06-22
Added
2022-03-18
Modified
2022-10-26
Description
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
Solution(s)
suse-upgrade-ansiblesuse-upgrade-ansible-docsuse-upgrade-ansible-testsuse-upgrade-dracut-saltbootsuse-upgrade-golang-github-prometheus-node_exportersuse-upgrade-golang-github-qubitproducts-exporter_exportersuse-upgrade-prometheus-blackbox_exportersuse-upgrade-python2-hwdatasuse-upgrade-python3-hwdatasuse-upgrade-spacecmdsuse-upgrade-wire
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.