[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzhbzBaGYkxz6zlRTHJ5cAwi9hQRZfJDGZCJwQ7F7SU0":3,"g5a-risk:CVE-2021-3681":116},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":27,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":112,"notableEvents":113},"CVE-2021-3681","What is CVE-2021-3681?","A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in \"galaxy.yml\" include files in the ``.tar.gz`` file. This contains sensitive info, such as the user's Ansible Galaxy API key and any secrets in ``ansible`` or ``ansible-playbook`` verbose output without the``no_log`` redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone who downloads or installs the collection can view the secrets.","A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded v...","2022-04-18T17:15:15.507","2023-11-07T03:38:12.5",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00247,[39,39,39,39,39,39,39],"Medium",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"redhat","ansible_automation_platform","1.2","cpe:2.3:a:redhat:ansible_automation_platform:1.2:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"ansible_galaxy","3.3.0","cpe:2.3:a:redhat:ansible_galaxy:3.3.0:*:*:*:*:*:*:*",2,[54,60],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1989407","Red Hat",[58,59],"Issue Tracking","Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fgithub.com\u002Fansible\u002Fgalaxy\u002Fissues\u002F1977","GitHub",[64],"Third Party Advisory",[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2021-3681? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-3681, a medium severity cyber security vulnerability from 2022. A flaw was found in Ansible Galaxy Collections. When colle...","CVE-2021-3681, CVE-2021-3681 vulnerability, CVE-2021-3681 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, redhat security, ansible_automation_platform vulnerability, ansible_galaxy vulnerability","\u002Fwhat-is\u002Fcve-2021-3681",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-3681","Cybersecurity","CVE-2021-3681, CVE-2021-3681 vulnerability, CVE-2021-3681 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":27,"CPEMatch":107},"OR",[108,110],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CBA4F8F3-6FC3-4ADD-BB96-A707E94AB0AB",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1690AEF3-1BBC-40FE-9B89-AD11691269B7",[],[],{"lastModified":11,"cacheTime":115,"version":33},1792366567272,{"score":117,"band":118,"action":119,"scoredAt":120},18,"Info","Track","2026-10-16T06:54:09.71686+00:00"]