PyPI/ansible CVE-2022-3697: high 7.5, EPSS 0.78%

Ansible leaks password to logs

Action: Upgrade ansible to 7.0.0 or later.

pip install ansible==7.0.0

Affected

Fixed versions

Sources

• osv: GHSA-cpx3-93w7-457x
• https://nvd.nist.gov/vuln/detail/CVE-2022-3697
• https://github.com/ansible-collections/amazon.aws/pull/1199
• https://github.com/ansible/ansible/pull/35749
• https://github.com/ansible-community/ansible-build-data/blob/main/6/CHANGELOG-v6.rst
• https://github.com/ansible/ansible
• https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html

CVE-2022-3697 · published 2022-10-28T19:00:38Z · modified 2026-07-07T11:56:18.999378054Z · JSON