CVE-2025-14010

EUVD-2025-201152
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.26%
Affected Products (NVD)
VendorProductVersion
redhatcommunity.general
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ansible
bookworm
7.7.0+dfsg-3+deb12u1
fixed
bullseye
2.10.7+merged+base+2.10.17+dfsg-0+deb11u1
fixed
bullseye (security)
2.10.7+merged+base+2.10.17+dfsg-0+deb11u4
fixed
forky
14.0.0+dfsg-1
fixed
sid
14.0.0+dfsg-1
fixed
trixie
12.0.0+dfsg-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ansible
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
plucky
ignored
questing
ignored
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
ansible-core
jammy
needs-triage
noble
needs-triage
plucky
ignored
questing
ignored
resolute
needs-triage
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
ansible
Amazon Linux 2023
0:8.3.0-1.amzn2023.0.2
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2025-14010
https://bugzilla.redhat.com/show_bug.cgi?id=2418774
https://github.com/ansible-collections/community.general/issues/11000
https://github.com/ansible-collections/community.general/pull/11005
https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes
https://github.com/ansible-collections/community.general/issues/11000