CVE catalog

CVE-2021-20178

ansible: CVE-2021-20178

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 25, 2026

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianansiblesid14.4.0+dfsg-1fixed
Debianansibleforky14.0.0+dfsg-1fixed
Debianansibletrixie12.0.0+dfsg-0+deb13u1fixed
Debianansiblebookworm7.7.0+dfsg-3+deb12u1fixed
Suseansiblemanager client tools 15-beta2.9.27-159000.3.9.1fixed
Susedracut-saltbootmanager client tools 15-beta0.1.1681904360.84ef141-159000.3.30.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager client tools 15-beta0.4.0-159000.4.6.1fixed
Susegolang-github-boynux-squid_exportermanager client tools 15-beta1.6-159000.4.9.1fixed
Susegolang-github-lusitaniae-apache_exportermanager client tools 15-beta1.0.0-159000.4.12.1fixed
Susegolang-github-prometheus-prometheusmanager client tools 15-beta2.45.0-159000.6.33.1fixed
Susegrafanamanager client tools 15-beta9.5.8-159000.4.24.1fixed
Susemgr-pushmanager client tools 15-beta5.0.1-159000.4.21.1fixed
Suseprometheus-blackbox_exportermanager client tools 15-beta0.24.0-159000.3.6.1fixed
Suseprometheus-postgres_exportermanager client tools 15-beta0.10.1-159000.3.6.1fixed
Susepython-hwdatamanager client tools 15-beta2.3.5-159000.5.13.1fixed
Susepython-pyvmomimanager client tools 15-beta6.7.3-159000.3.6.1fixed
Suserhnlibmanager client tools 15-beta5.0.1-159000.6.30.1fixed
Susespacecmdmanager client tools 15-beta5.0.1-159000.6.42.1fixed
Susespacewalk-client-toolsmanager client tools 15-beta5.0.1-159000.6.48.1fixed
Susesupportutils-plugin-saltmanager client tools 15-beta1.2.2-159000.5.9.1fixed
Susesupportutils-plugin-susemanager-clientmanager client tools 15-beta5.0.1-159000.6.15.1fixed
Suseuyuni-common-libsmanager client tools 15-beta5.0.1-159000.3.33.1fixed
Suseuyuni-proxy-systemd-servicesmanager client tools 15-beta5.0.1-159000.3.9.1fixed
Susedracut-saltbootmanager client tools beta for sle micro 50.1.1681904360.84ef141-159000.3.30.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager client tools beta for sle micro 50.4.0-159000.4.6.1fixed
Suseprometheus-blackbox_exportermanager client tools beta for sle micro 50.24.0-159000.3.6.1fixed
Suseuyuni-proxy-systemd-servicesmanager client tools beta for sle micro 55.0.1-159000.3.9.1fixed
Suseansiblemanager client tools 152.9.27-150000.1.14.1fixed
Susedracut-saltbootmanager client tools 150.1.1657643023.0d694ce-150000.1.35.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager client tools 150.4.0-150000.1.15.1fixed
Susemgr-daemonmanager client tools 154.3.5-150000.1.35.1fixed
Susemgr-virtualizationmanager client tools 154.3.6-150000.1.32.1fixed
Suseprometheus-blackbox_exportermanager client tools 150.19.0-150000.1.11.1fixed
Susepython-hwdatamanager client tools 152.3.5-150000.3.9.1fixed
Susespacecmdmanager client tools 154.3.14-150000.3.83.1fixed
Susespacewalk-client-toolsmanager client tools 154.3.11-150000.3.65.1fixed
Suseuyuni-common-libsmanager client tools 154.3.5-150000.1.24.1fixed
Suseuyuni-proxy-systemd-servicesmanager client tools 154.3.6-150000.1.6.1fixed
Susezypp-plugin-spacewalkmanager client tools 151.0.13-150000.3.32.1fixed
Susepython-hwdatamanager proxy module 4.12.3.5-150000.3.9.1fixed
Susezypp-plugin-spacewalkmanager proxy module 4.11.0.13-150000.3.32.1fixed
Suseansiblemanager proxy module 4.22.9.27-150000.1.14.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager proxy module 4.20.4.0-150000.1.15.1fixed
Suseprometheus-blackbox_exportermanager proxy module 4.20.19.0-150000.1.11.1fixed
Susepython-hwdatamanager proxy module 4.22.3.5-150000.3.9.1fixed
Susezypp-plugin-spacewalkmanager proxy module 4.21.0.13-150000.3.32.1fixed
Suseansiblemanager proxy module 4.32.9.27-150000.1.14.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager proxy module 4.30.4.0-150000.1.15.1fixed
Suseprometheus-blackbox_exportermanager proxy module 4.30.19.0-150000.1.11.1fixed
Susepython-hwdatamanager proxy module 4.32.3.5-150000.3.9.1fixed
Susezypp-plugin-spacewalkmanager proxy module 4.31.0.13-150000.3.32.1fixed
Susepython-hwdatamanager server module 4.12.3.5-150000.3.9.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager server module 4.20.4.0-150000.1.15.1fixed
Susepython-hwdatamanager server module 4.22.3.5-150000.3.9.1fixed
Susegolang-github-QubitProducts-exporter_exportermanager server module 4.30.4.0-150000.1.15.1fixed
Susepython-hwdatamanager server module 4.32.3.5-150000.3.9.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15-espos1.3.0-150000.3.15.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15-ltss1.3.0-150000.3.15.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 15-ltss1.3.0-150000.3.15.1fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 151.3.0-150000.3.15.1fixed
Opensuseansibleleap 15.32.9.27-150000.1.14.1fixed
Opensusedracut-saltbootleap 15.30.1.1657643023.0d694ce-150000.1.35.1fixed
Opensusegolang-github-QubitProducts-exporter_exporterleap 15.30.4.0-150000.1.15.1fixed
Opensusepython-hwdataleap 15.32.3.5-150000.3.9.1fixed
Opensusespacecmdleap 15.34.3.14-150000.3.83.1fixed
Opensuseansibleleap 15.42.9.27-150000.1.14.1fixed
Opensusedracut-saltbootleap 15.40.1.1657643023.0d694ce-150000.1.35.1fixed
Opensusegolang-github-QubitProducts-exporter_exporterleap 15.40.4.0-150000.1.15.1fixed
Opensuseprometheus-blackbox_exporterleap 15.40.19.0-150000.1.11.1fixed
Opensusepython-hwdataleap 15.42.3.5-150000.3.9.1fixed
Opensusespacecmdleap 15.44.3.14-150000.3.83.1fixed
Opensusewireleap 15.40.5.0-150000.1.6.1fixed
Suseansiblehpe helion openstack 82.9.22-3.18.1fixed
Suseansibleopenstack cloud 82.9.22-3.18.1fixed
Suseansibleopenstack cloud crowbar 82.9.22-3.18.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianansiblesourcesid2.10.7-1not yet assignedNot reported[985753]
Debianansiblesourceforky2.10.7-1not yet assignedNot reported[985753]
Debianansiblesourcetrixie2.10.7-1not yet assignedNot reported[985753]
Debianansiblesourcebookworm2.10.7-1not yet assignedNot reported[985753]
Suseansiblerpmmanager client tools 15-beta2.9.27-159000.3.9.1Not reportedSUSE-SU-2024:0196-1Not reported
Susedracut-saltbootrpmmanager client tools 15-beta0.1.1681904360.84ef141-159000.3.30.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager client tools 15-beta0.4.0-159000.4.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegolang-github-boynux-squid_exporterrpmmanager client tools 15-beta1.6-159000.4.9.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegolang-github-lusitaniae-apache_exporterrpmmanager client tools 15-beta1.0.0-159000.4.12.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegolang-github-prometheus-prometheusrpmmanager client tools 15-beta2.45.0-159000.6.33.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegrafanarpmmanager client tools 15-beta9.5.8-159000.4.24.1Not reportedSUSE-SU-2024:0196-1Not reported
Susemgr-pushrpmmanager client tools 15-beta5.0.1-159000.4.21.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseprometheus-blackbox_exporterrpmmanager client tools 15-beta0.24.0-159000.3.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseprometheus-postgres_exporterrpmmanager client tools 15-beta0.10.1-159000.3.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Susepython-hwdatarpmmanager client tools 15-beta2.3.5-159000.5.13.1Not reportedSUSE-SU-2024:0196-1Not reported
Susepython-pyvmomirpmmanager client tools 15-beta6.7.3-159000.3.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Suserhnlibrpmmanager client tools 15-beta5.0.1-159000.6.30.1Not reportedSUSE-SU-2024:0196-1Not reported
Susespacecmdrpmmanager client tools 15-beta5.0.1-159000.6.42.1Not reportedSUSE-SU-2024:0196-1Not reported
Susespacewalk-client-toolsrpmmanager client tools 15-beta5.0.1-159000.6.48.1Not reportedSUSE-SU-2024:0196-1Not reported
Susesupportutils-plugin-saltrpmmanager client tools 15-beta1.2.2-159000.5.9.1Not reportedSUSE-SU-2024:0196-1Not reported
Susesupportutils-plugin-susemanager-clientrpmmanager client tools 15-beta5.0.1-159000.6.15.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseuyuni-common-libsrpmmanager client tools 15-beta5.0.1-159000.3.33.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseuyuni-proxy-systemd-servicesrpmmanager client tools 15-beta5.0.1-159000.3.9.1Not reportedSUSE-SU-2024:0196-1Not reported
Susedracut-saltbootrpmmanager client tools beta for sle micro 50.1.1681904360.84ef141-159000.3.30.1Not reportedSUSE-SU-2024:0196-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager client tools beta for sle micro 50.4.0-159000.4.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseprometheus-blackbox_exporterrpmmanager client tools beta for sle micro 50.24.0-159000.3.6.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseuyuni-proxy-systemd-servicesrpmmanager client tools beta for sle micro 55.0.1-159000.3.9.1Not reportedSUSE-SU-2024:0196-1Not reported
Suseansiblerpmmanager client tools 152.9.27-150000.1.14.1Not reportedSUSE-SU-2022:3178-1Not reported
Susedracut-saltbootrpmmanager client tools 150.1.1657643023.0d694ce-150000.1.35.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager client tools 150.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susemgr-daemonrpmmanager client tools 154.3.5-150000.1.35.1Not reportedSUSE-SU-2022:3178-1Not reported
Susemgr-virtualizationrpmmanager client tools 154.3.6-150000.1.32.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseprometheus-blackbox_exporterrpmmanager client tools 150.19.0-150000.1.11.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager client tools 152.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susespacecmdrpmmanager client tools 154.3.14-150000.3.83.1Not reportedSUSE-SU-2022:3178-1Not reported
Susespacewalk-client-toolsrpmmanager client tools 154.3.11-150000.3.65.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseuyuni-common-libsrpmmanager client tools 154.3.5-150000.1.24.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseuyuni-proxy-systemd-servicesrpmmanager client tools 154.3.6-150000.1.6.1Not reportedSUSE-SU-2022:3178-1Not reported
Susezypp-plugin-spacewalkrpmmanager client tools 151.0.13-150000.3.32.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager proxy module 4.12.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susezypp-plugin-spacewalkrpmmanager proxy module 4.11.0.13-150000.3.32.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseansiblerpmmanager proxy module 4.22.9.27-150000.1.14.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager proxy module 4.20.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseprometheus-blackbox_exporterrpmmanager proxy module 4.20.19.0-150000.1.11.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager proxy module 4.22.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susezypp-plugin-spacewalkrpmmanager proxy module 4.21.0.13-150000.3.32.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseansiblerpmmanager proxy module 4.32.9.27-150000.1.14.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager proxy module 4.30.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseprometheus-blackbox_exporterrpmmanager proxy module 4.30.19.0-150000.1.11.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager proxy module 4.32.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susezypp-plugin-spacewalkrpmmanager proxy module 4.31.0.13-150000.3.32.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager server module 4.12.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager server module 4.20.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager server module 4.22.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-QubitProducts-exporter_exporterrpmmanager server module 4.30.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susepython-hwdatarpmmanager server module 4.32.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15-espos1.3.0-150000.3.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15-ltss1.3.0-150000.3.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 15-ltss1.3.0-150000.3.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 151.3.0-150000.3.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensuseansiblerpmleap 15.32.9.27-150000.1.14.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusedracut-saltbootrpmleap 15.30.1.1657643023.0d694ce-150000.1.35.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusegolang-github-QubitProducts-exporter_exporterrpmleap 15.30.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusepython-hwdatarpmleap 15.32.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusespacecmdrpmleap 15.34.3.14-150000.3.83.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensuseansiblerpmleap 15.42.9.27-150000.1.14.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusedracut-saltbootrpmleap 15.40.1.1657643023.0d694ce-150000.1.35.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusegolang-github-QubitProducts-exporter_exporterrpmleap 15.40.4.0-150000.1.15.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensuseprometheus-blackbox_exporterrpmleap 15.40.19.0-150000.1.11.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusepython-hwdatarpmleap 15.42.3.5-150000.3.9.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusespacecmdrpmleap 15.44.3.14-150000.3.83.1Not reportedSUSE-SU-2022:3178-1Not reported
Opensusewirerpmleap 15.40.5.0-150000.1.6.1Not reportedSUSE-SU-2022:3178-1Not reported
Suseansiblerpmhpe helion openstack 82.9.22-3.18.1Not reportedSUSE-SU-2021:2121-1Not reported
Suseansiblerpmopenstack cloud 82.9.22-3.18.1Not reportedSUSE-SU-2021:2121-1Not reported
Suseansiblerpmopenstack cloud crowbar 82.9.22-3.18.1Not reportedSUSE-SU-2021:2121-1Not reported

[Debian bug #985753]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ansible]Fixed
    Details (2)
    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.10.7-1

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

    • 7.7.0+dfsg-3+deb12u1 · all · bookworm

      Fixed · Fixed: 2.10.7-1

      dsa · ansible · debian · bookworm; dsa · ansible · debian · 12

[Debian 13 (Trixie)]

  • [ansible]Fixed
    Details (2)
    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.10.7-1

      dsa · ansible · debian · 13

    • 12.0.0+dfsg-0+deb13u1 · all · trixie

      Fixed · Fixed: 2.10.7-1

      dsa · ansible · debian · 13

Observed:

References