CVE-2021-27022CWE-532

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should…

published September 7, 2021

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00916 · 59.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2021-09-07T13:03Z
EPSS history
Timeline
  • 07 SEP 13:03Z
    A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should…
    cvelistv5