CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-4237
High (7.8) in redhat. EPSS 0.3% chance of exploitation in the next 30 days.
A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's confidentiality, integrity, and availability.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
- CWE
- CWE-497
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:ansible_automation_platform
- redhat:ansible_collection
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-ww3m-ffrm-qvqv | PyPI | ansible-core | >=2.8.0 <=2.15.2 | no fix published |
| PYSEC-2026-1125 | PyPI | ansible-core | >=2.8.0 <=2.15.2 | no fix published |