Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ansible_engine:2.9:*:*:*:*:*:*:*

part: a version: 2.9 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAnsible Engine (16c6ea6d-2eb0-5f5b-8a65-adb48f01e2e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ansible purl2cpe 2026-06-01 10:12:54.637744
pkg:deb/ubuntu/ansible purl2cpe 2026-06-01 10:12:54.637746
pkg:docker/ansible/ansible purl2cpe 2026-06-01 10:12:54.637747
pkg:github/ansible/ansible purl2cpe 2026-06-01 10:12:54.637749
pkg:rpm/fedora/ansible purl2cpe 2026-06-01 10:12:54.637750
pkg:rpm/opensuse/ansible purl2cpe 2026-06-01 10:12:54.637751

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20228 vulnerable 2026-06-08 05:29:08.771612 Details available
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.
Published: 2021-04-29T15:34:08.000Z
Updated: 2024-08-03T17:30:07.863Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.