CVE-2024-8775

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Sep 14, 2024
Source updated: Sep 17, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ansible-core

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: ansible-core
Package collection: https://github.com/ansible/ansible

ansible-core · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0	`affected`	semver	Unavailable	2.17.4	None listed

Ansible Automation Platform Execution Environments

Vendor: Red Hat
Product: Ansible Automation Platform Execution Environments
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform/ansible-builder-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Ansible Automation Platform Execution Environments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2.0-91	`unaffected`	rpm	*	Unavailable	None listed

Ansible Automation Platform Execution Environments

Vendor: Red Hat
Product: Ansible Automation Platform Execution Environments
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform/ansible-builder-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Ansible Automation Platform Execution Environments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.1-95	`unaffected`	rpm	*	Unavailable	None listed

Ansible Automation Platform Execution Environments

Vendor: Red Hat
Product: Ansible Automation Platform Execution Environments
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform/ee-29-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Ansible Automation Platform Execution Environments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.9.27-32	`unaffected`	rpm	*	Unavailable	None listed

Ansible Automation Platform Execution Environments

Vendor: Red Hat
Product: Ansible Automation Platform Execution Environments
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform/ee-minimal-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Ansible Automation Platform Execution Environments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.12.10-54	`unaffected`	rpm	*	Unavailable	None listed

Ansible Automation Platform Execution Environments

Vendor: Red Hat
Product: Ansible Automation Platform Execution Environments
Platforms: Unknown
Default status: affected
Package: ansible-automation-platform/ee-minimal-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Ansible Automation Platform Execution Environments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.15.12-17	`unaffected`	rpm	*	Unavailable	None listed

Discovery 1 for RHEL 9

Vendor: Red Hat
Product: Discovery 1 for RHEL 9
Platforms: Unknown
Default status: affected
Package: discovery/discovery-server-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Discovery 1 for RHEL 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.12.0-1	`unaffected`	rpm	*	Unavailable	None listed

Discovery 1 for RHEL 9

Vendor: Red Hat
Product: Discovery 1 for RHEL 9
Platforms: Unknown
Default status: affected
Package: discovery/discovery-ui-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Discovery 1 for RHEL 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.12.0-1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ansible Automation Platform 2.4 for RHEL 8

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 8
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Ansible Automation Platform 2.4 for RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1:2.15.13-1.el8ap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ansible Automation Platform 2.4 for RHEL 9

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.4 for RHEL 9
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Ansible Automation Platform 2.4 for RHEL 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1:2.15.13-1.el9ap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ansible Automation Platform 2.5 for RHEL 8

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.5 for RHEL 8
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Ansible Automation Platform 2.5 for RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1:2.16.13-1.el8ap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ansible Automation Platform 2.5 for RHEL 9

Vendor: Red Hat
Product: Red Hat Ansible Automation Platform 2.5 for RHEL 9
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Ansible Automation Platform 2.5 for RHEL 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1:2.16.13-1.el9ap	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 10

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: unaffected
Package: ansible-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux AI (RHEL AI)

Vendor: Red Hat
Product: Red Hat Enterprise Linux AI (RHEL AI)
Platforms: Unknown
Default status: affected
Package: rhelai1/bootc-nvidia-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.