CVE-2021-3620: Red Hat Ansible Automation Platform Early Access

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

Affected products

• Red Hat Ansible Automation Platform Early Access: version 2.0 only
• Red Hat Ansible Engine: before 2.9.27 (fixed in 2.9.27)
• Red Hat Enterprise Linux: version 8.0 only
• Red Hat Enterprise Linux For Power Little Endian: version 8.0 only
• Red Hat Openstack: version 1 only; version 16.1 only
• Red Hat Virtualization: version 4.0 only
• Red Hat Virtualization For IBM Power Little Endian: version 4.0 only
• Red Hat Virtualization Host: version 4.0 only
• Red Hat Virtualization Manager: version 4.4 only

Published 2022-03-03. Last modified 2026-06-17.