CVE-2025-14010
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Dec 4, 2025
CISA due date
—
The record
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | ansible | 0 | 12.2.0 |
Related vulnerabilities
- GHSA-8ggh-xwr9-3373 Ansible Community General Collection is vulnerable to exposure of sensitive information Same vulnerability
- CVE-2023-5115 An absolute path traversal attack exists in the Ansible automation platform. Also affects ansible
- CVE-2026-16648 Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log… CWE-532
- CVE-2026-104872 OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting… CWE-532
- CVE-2026-81870 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-532
- CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error… CWE-532
- CVE-2026-80169 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-79966 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532