PT-2020-6577 · Unknown+2 · Ansible Engine+2

S-Hertel · Published 2020-08-01 · Updated 2025-11-21 · CVE-2020-14332

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ansible Engine (affected versions not specified)

Description A flaw was found in the Ansible Engine when using module args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality. The issue is related to improper handling of log output, which can be exploited to gain access to confidential data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

CWE-117

Related Identifiers

ALT-PU-2020-2923

ALT-PU-2020-3006

ALT-PU-2021-1800

BDU:2022-00280

CVE-2020-14332

DSA-4950-1

GHSA-J667-C2HM-F2WP

OPENSUSE-SU-2022:0081-1

OPENSUSE-SU-2024:10615-1

OPENSUSE-SU-2024:14244-1

OPENSUSE-SU-2024:14536-1

OPENSUSE-SU-2025:15605-1

OPENSUSE-SU-2025:15753-1

PYSEC-2020-4

RHSA-2020:3600

SUSE-SU-2020:3309-1

SUSE-SU-2024:1509-1

Affected Products

Alt Linux

Ansible Engine

Astra Linux

References · 185

• https://github.com/ansible/ansible/pull/71033 · Patch
• https://osv.dev/vulnerability/CVE-2020-14332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14332 · Security Note
• https://debian.org/security/2021/dsa-4950 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-14332 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15753-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-14332 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3309-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-14332 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15605-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-14332 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0081-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00280 · Security Note