CVEvulnerability
CVE-2025-14010
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-12-04
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-532
Description
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Affected configurations
• redhat community.general
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://access.redhat.com/security/cve/CVE-2025-14010 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418774 Issue Tracking, Vendor Advisory
- https://github.com/ansible-collections/community.general/issues/11000 github.com
- https://github.com/ansible-collections/community.general/pull/11005 github.com
- https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes github.com
- https://github.com/ansible-collections/community.general/issues/11000 github.com