CVE-2021-3532 : A flaw was found in Ansible where the secret information present in async

A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.

Published 2021-06-09 12:15:08

Updated 2022-10-07 20:46:02

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2021-3532

Redhat » Enterprise Linux » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Ansible Tower » Version: 3.0
cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
Matching versions
Redhat » Ansible Tower » Version: 3.7.0
cpe:2.3:a:redhat:ansible_tower:3.7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Ansible Engine » Version: 2.0
cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*
Matching versions
Redhat » Ansible Automation Platform » Version: 1.2
cpe:2.3:a:redhat:ansible_automation_platform:1.2:*:*:*:*:*:*:*
Matching versions
Redhat » Openstack-rdo » Version: N/A
cpe:2.3:a:redhat:openstack-rdo:-:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2021-3532

Top countries where our scanners detected CVE-2021-3532

Top open port discovered on systems with this issue 53

IPs affected by CVE-2021-3532 617,964

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2021-3532!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2021-3532

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-3532

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2021-3532

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: secalert@redhat.com (Secondary)
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-3532

https://bugzilla.redhat.com/show_bug.cgi?id=1956464

1956464 – (CVE-2021-3532) CVE-2021-3532 ansible: async_file sensitive information disclosure
Issue Tracking;Third Party Advisory