suse · CVE-2022-3697

Quick triage

Priority: medium Published: 2022-10-27 23:51:13 UTC Updated: 2025-02-16 03:19:41 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-3697 severity moderate: SUSE including 3 source package names (ansible, ansible-doc, ansible1), 13 product×package rows across 9 product lines (HPE Helion OpenStack 8, SUSE Linux Enterprise Server 11 SP3 for Teradata, … (9 product lines)): Known Not Affected 13.

Description:

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

cvelogic Threat Intelligence