5.5
Medium
CVE-2025-14010 A flaw was found in ansible-collection-community-general
Description
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ansible Community General Collection 12.0 | 12.0.0 → < 12.2.0 | 12.2.0 |
| Ansible Community General Collection 11.0 | 11.0.0 → < 11.4.1 | 11.4.1 |
| Ansible Community General Collection 10.0 | 10.0.0 → < 10.7.6 | 10.7.6 |
| Ansible Community General Collection 7.1 | 7.1.0 → < 9.5.13 | 9.5.13 |
| Red Hat Ceph Storage 5 | Versions not published | |
| Red Hat Ceph Storage 6 | Versions not published | |
| Red Hat Ceph Storage 7 | Versions not published | |
| Red Hat Ceph Storage 8 | Versions not published | |
| Red Hat OpenStack Platform 17.1 | Versions not published |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenStack Platform 18.0 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2418774 bugzilla.redhat.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified