CVE-2021-20228

A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.

• CWE-200
• CWE-200

• https://bugzilla.redhat.com/show_bug.cgi?id=1925002Issue Tracking, Third Party Advisory
• https://github.com/ansible/ansible/pull/73487Patch, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4950Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1925002Issue Tracking, Third Party Advisory
• https://github.com/ansible/ansible/pull/73487Patch, Third Party Advisory
• https://www.debian.org/security/2021/dsa-4950Third Party Advisory

Published

Apr 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20222A flaw was found in keycloak. The new account console in key…7.5
• CVE-2021-20223Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-20224An integer overflow issue was discovered in ImageMagick's Ex…5.5
• CVE-2021-20225A flaw was found in grub2 in versions prior to 2.06. The opt…6.7
• CVE-2021-20226A use-after-free flaw was found in the io_uring in Linux ker…7.8
• CVE-2021-20227A flaw was found in SQLite's SELECT query functionality (src…5.5
• CVE-2021-20229A flaw was found in PostgreSQL in versions before 13.2. This…4.3
• CVE-2021-2023Vulnerability in the Oracle Installed Base product of Oracle…4.7
• CVE-2021-20230A flaw was found in stunnel before 5.57, where it improperly…7.5
• CVE-2021-20231A flaw was found in gnutls. A use after free issue in client…9.8
• CVE-2021-20232A flaw was found in gnutls. A use after free issue in client…9.8
• CVE-2021-20233A flaw was found in grub2 in versions prior to 2.06. Setpara…8.2