March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Multiple Mozilla Security Vulnerabilities
April 12, 2021
Rewterz Threat Alert – Trickbot Malware- Active IOCs
April 12, 2021
Rewterz Threat Advisory – Multiple Mozilla Security Vulnerabilities
April 12, 2021
Rewterz Threat Alert – Trickbot Malware- Active IOCs
April 12, 2021
Severity
Medium
Analysis Summary
CVE-2021-3447
Red Hat Ansible Automation Platform and Ansible Tower could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of user credentials in plain-text on managed nodes. By gaining access to the log files, an attacker could exploit this vulnerability to obtain credentials information, and use this information to launch further attacks against the affected system.
Impact
Information Disclosure
Affected Vendors
RedHat
Affected Products
- Red Hat Ansible Automation Platform 1.2 for RHEL 7
- Red Hat Ansible Tower 3
- Red Hat Ansible Engine 2
Remediation
Refer to Red Hat Web site for patch, upgrade or suggested workaround information.