Medium severity5.5NVD Advisory· Published Mar 3, 2022· Updated Jun 17, 2026

CVE-2021-3620

Description

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ansiblePyPI	< 2.9.27	2.9.27

Affected products

Ansible/Ansible Enginedescription
ghsa-coords72 versions
pkg:pypi/ansible pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Proxy%20Module%204.1 pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/mgr-daemon&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/ansible&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/ansible&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/mgr-virtualization&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/zypp-plugin-spacewalk&distro=SUSE%20Manager%20Client%20Tools%2015 pkg:rpm/suse/zypp-plugin-spacewalk&distro=SUSE%20Manager%20Proxy%20Module%204.1 pkg:rpm/suse/ansible&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/zypp-plugin-spacewalk&distro=SUSE%20Manager%20Proxy%20Module%204.2 pkg:rpm/suse/ansible&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/zypp-plugin-spacewalk&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Server%20Module%204.1 pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Server%20Module%204.2 pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Server%20Module%204.3 pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/opensuse/ansible&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/golang-github-QubitProducts-exporter_exporter&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/python-hwdata&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/ansible&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/golang-github-QubitProducts-exporter_exporter&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/prometheus-blackbox_exporter&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/python-hwdata&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/wire&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/ansible&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/golang-github-boynux-squid_exporter&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/golang-github-prometheus-prometheus&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/mgr-push&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/supportutils-plugin-salt&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/supportutils-plugin-susemanager-client&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205 pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205 pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205 pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.3 pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/prometheus-postgres_exporter&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/python-hwdata&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/python-pyvmomi&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/ansible&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/ansible&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE%20Manager%20Client%20Tools%2015-BETA pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205
< 2.9.27+ 71 more
- (no CPE)range: < 2.9.27
- (no CPE)range: < 0.1.1657643023.0d694ce-150000.1.35.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 1.3.0-150000.3.15.1
- (no CPE)range: < 1.3.0-150000.3.15.1
- (no CPE)range: < 4.3.5-150000.1.35.1
- (no CPE)range: < 2.9.27-3.21.1
- (no CPE)range: < 2.9.27-150000.1.14.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 4.3.6-150000.1.32.1
- (no CPE)range: < 0.19.0-150000.1.11.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 4.3.14-150000.3.83.1
- (no CPE)range: < 4.3.11-150000.3.65.1
- (no CPE)range: < 4.3.5-150000.1.24.1
- (no CPE)range: < 4.3.6-150000.1.6.1
- (no CPE)range: < 1.0.13-150000.3.32.1
- (no CPE)range: < 1.0.13-150000.3.32.1
- (no CPE)range: < 2.9.27-150000.1.14.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 0.19.0-150000.1.11.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 1.0.13-150000.3.32.1
- (no CPE)range: < 2.9.27-150000.1.14.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 1.0.13-150000.3.32.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 1.3.0-150000.3.15.1
- (no CPE)range: < 1.3.0-150000.3.15.1
- (no CPE)range: < 2.9.27-150000.1.14.1
- (no CPE)range: < 0.1.1657643023.0d694ce-150000.1.35.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 4.3.14-150000.3.83.1
- (no CPE)range: < 2.9.27-150000.1.14.1
- (no CPE)range: < 0.1.1657643023.0d694ce-150000.1.35.1
- (no CPE)range: < 0.4.0-150000.1.15.1
- (no CPE)range: < 0.19.0-150000.1.11.1
- (no CPE)range: < 2.3.5-150000.3.9.1
- (no CPE)range: < 4.3.14-150000.3.83.1
- (no CPE)range: < 0.5.0-150000.1.6.1
- (no CPE)range: < 2.9.27-159000.3.9.1
- (no CPE)range: < 0.1.1681904360.84ef141-159000.3.30.1
- (no CPE)range: < 0.4.0-159000.4.6.1
- (no CPE)range: < 1.6-159000.4.9.1
- (no CPE)range: < 1.0.0-159000.4.12.1
- (no CPE)range: < 2.45.0-159000.6.33.1
- (no CPE)range: < 9.5.8-159000.4.24.1
- (no CPE)range: < 5.0.1-159000.4.21.1
- (no CPE)range: < 1.2.2-159000.5.9.1
- (no CPE)range: < 5.0.1-159000.6.15.1
- (no CPE)range: < 0.1.1681904360.84ef141-159000.3.30.1
- (no CPE)range: < 0.24.0-159000.3.6.1
- (no CPE)range: < 5.0.1-159000.3.9.1
- (no CPE)range: < 0.19.0-150000.1.11.1
- (no CPE)range: < 0.24.0-159000.3.6.1
- (no CPE)range: < 0.10.1-159000.3.6.1
- (no CPE)range: < 2.3.5-159000.5.13.1
- (no CPE)range: < 6.7.3-159000.3.6.1
- (no CPE)range: < 5.0.1-159000.6.30.1
- (no CPE)range: < 2.9.27-3.21.1
- (no CPE)range: < 2.9.27-3.21.1
- (no CPE)range: < 5.0.1-159000.6.42.1
- (no CPE)range: < 5.0.1-159000.6.48.1
- (no CPE)range: < 5.0.1-159000.3.33.1
- (no CPE)range: < 5.0.1-159000.3.9.1
- (no CPE)range: < 0.4.0-159000.4.6.1
Red Hat/Ansible Automation Platform Early Access
cpe:2.3:a:redhat:ansible_automation_platform_early_access:2.0:*:*:*:*:*:*:*
Red Hat/Ansible Engine
cpe:2.3:a:redhat:ansible_engine:*:*:*:*:*:*:*:*
Range: <2.9.27
Red Hat/Openstack2 versions
cpe:2.3:a:redhat:openstack:1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:openstack:1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
Red Hat/Virtualization2 versions
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:virtualization_manager:4.4:*:*:*:*:*:*:*
Red Hat/Virtualization For Ibm Power Little Endian
cpe:2.3:a:redhat:virtualization_for_ibm_power_little_endian:4.0:*:*:*:*:*:*:*
Red Hat/Virtualization Host
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party AdvisoryWEB
github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-4r65-35qq-ch8jghsaADVISORY
github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rstnvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-3620ghsaADVISORY
access.redhat.com/errata/RHSA-2021:3871ghsaWEB
access.redhat.com/errata/RHSA-2021:3872ghsaWEB
access.redhat.com/errata/RHSA-2021:3874ghsaWEB
access.redhat.com/errata/RHSA-2021:4703ghsaWEB
access.redhat.com/errata/RHSA-2021:4750ghsaWEB
access.redhat.com/security/cve/CVE-2021-3620ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yamlghsaWEB
lists.debian.org/debian-lts-announce/2023/12/msg00018.htmlnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000