CVE-2022-3697
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ansible, ansible community.aws, ansible amazon.aws
- Vendor
- n/a
- Product
- ansible, ansible community.aws, ansible amazon.aws
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ansible from 2.5.0 before 2.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| ansible community.aws before 2.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| ansible amazon.aws from 2.1.0 before 5.1.0 | affected | Unavailable | Unavailable | Unavailable | None listed |