{"id":"CVE-2024-0690","aliases":[],"cve":{"records":[{"id":"CVE-2024-0690","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2024-01-18T16:03:22.626Z","published":"2024-02-06T12:00:28.505Z","modified":"2026-11-06T07:07:18.510Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-06T07:07:18.510Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2024-07-05T17:21:35.753Z"},{"name":"CVE","role":"ADP","organizationId":"af854a3a-2127-422b-91ae-364da2661108","modified":"2025-11-04T18:22:31.474Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0733","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:2246","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:3043","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0690","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259013","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://github.com/ansible/ansible/pull/82565","tags":[],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:0733","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:2246","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:3043","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/security/cve/CVE-2024-0690","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259013","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://github.com/ansible/ansible/pull/82565","tags":["x_transferred"],"source":"CVE"},{"url":"https://security.netapp.com/advisory/ntap-20250117-0001/","tags":[],"source":"CVE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZQGCRDSZL7ONCULMB6ZUHOE4L44KIBP/","tags":[],"source":"CVE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDYSWOCPZMNRU5LWKIEBW4WGWLMTU7WQ/","tags":[],"source":"CVE"}],"weaknesses":[{"id":"CWE-117","description":"Improper Output Neutralization for Logs","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2024-02-06T18:30:30.103500Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration","titleSource":"redhat","descriptionSource":"redhat","description":"An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.","score":5,"severity":"medium","published":"2024-02-06T12:00:28.505Z","modified":"2026-11-06T07:07:18.510Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"ansible","platforms":[],"versions":[{"version":"2.14.0","status":"affected","lessThan":"2.14.4","versionType":"semver"},{"version":"2.15.0","status":"affected","lessThan":"2.15.9","versionType":"semver"},{"version":"2.16.0","status":"affected","lessThan":"2.16.3","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","platforms":[],"versions":[{"version":"1:2.15.9-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","platforms":[],"versions":[{"version":"1:2.15.9-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","platforms":[],"versions":[{"version":"1:2.15.9-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","platforms":[],"versions":[{"version":"1:2.15.9-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","platforms":[],"versions":[{"version":"1:2.15.9-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","platforms":[],"versions":[{"version":"1:2.15.9-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:2.16.3-2.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"1:2.14.14-1.el9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"}],"remediation":[{"text":"Explicitly setting 'no_log' within the playbook will prevent the output from containing potentially sensitive information.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"}],"references":["https://access.redhat.com/errata/RHSA-2024:0733","https://access.redhat.com/errata/RHSA-2024:2246","https://access.redhat.com/errata/RHSA-2024:3043","https://access.redhat.com/security/cve/CVE-2024-0690","https://bugzilla.redhat.com/show_bug.cgi?id=2259013","https://github.com/ansible/ansible/pull/82565","https://security.netapp.com/advisory/ntap-20250117-0001/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZQGCRDSZL7ONCULMB6ZUHOE4L44KIBP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDYSWOCPZMNRU5LWKIEBW4WGWLMTU7WQ/"],"sources":[{"name":"CVE","id":"CVE-2024-0690","modified":"2026-11-06T07:07:18.510Z","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","score":5}],"sourceAffected":[],"observedAt":"2026-11-06T07:35:25.560Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:50:31.991Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T14:15:32.744Z","attemptedAt":"2026-11-05T14:15:32.744Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T14:15:32.744Z","attemptedAt":"2026-11-05T14:15:32.744Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-05T14:15:32.744Z","attemptedAt":"2026-11-05T14:15:32.744Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-05T14:15:32.744Z","attemptedAt":"2026-11-05T14:15:32.744Z"}],"evidence":[{"source":"NVD","id":"CVE-2024-0690","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0690","modified":"2026-11-05T12:17:42.767","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T14:15:32.744Z"},{"source":"NVD","id":"CVE-2024-0690","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0690","modified":"2026-11-05T12:17:42.767","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T14:15:32.744Z"},{"source":"FIRST EPSS","id":"CVE-2024-0690","url":"https://www.first.org/epss/","probability":0.00304,"percentile":0.23312,"date":"2026-11-04","checkedAt":"2026-11-05T14:15:32.744Z"},{"source":"ENISA EUVD","id":"EUVD-2024-0003","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0003","modified":"Nov 5, 2026, 11:39:22 AM","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T14:15:32.744Z"},{"source":"GitHub Advisory Database","id":"GHSA-h24r-m9qc-pvpg","url":"https://github.com/advisories/GHSA-h24r-m9qc-pvpg","modified":"2026-03-20T05:07:47Z","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T14:15:32.744Z"}],"aiSummary":{"text":"Ansible-core versions 2.14.0 to 2.14.3, 2.15.0 to 2.15.8, and 2.16.0 to 2.16.2 may leak information due to ignoring the ANSIBLE_NO_LOG configuration in certain tasks. Depending on the task, this issue may include sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T12:56:10.557Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2024-0690"}]}}