<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2024-0690</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2024-0690</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>24</Number>
        <Date>2026-03-05T03:02:00Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2024-01-20T00:09:06Z</InitialReleaseDate>
    <CurrentReleaseDate>2026-03-05T03:02:00Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2024-0690</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2024-April/035080.html</URL>
      <Description>E-Mail link for SUSE-SU-2024:1427-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2024-May/035168.html</URL>
      <Description>E-Mail link for SUSE-SU-2024:1509-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2Y6RFLPB54N7XR7AP7A2DEXGLBEDEQJU/</URL>
      <Description>E-Mail link for openSUSE-SU-2024:14537-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="HPE Helion OpenStack 8">
      <Branch Type="Product Name" Name="HPE Helion OpenStack 8">
        <FullProductName ProductID="HPE Helion OpenStack 8" CPE="cpe:/o:suse:hpe-helion-openstack:8">HPE Helion OpenStack 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Liberty Linux 8">
      <Branch Type="Product Name" Name="SUSE Liberty Linux 8">
        <FullProductName ProductID="SUSE Liberty Linux 8" CPE="cpe:/o:suse:sll:8">SUSE Liberty Linux 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Liberty Linux 9">
      <Branch Type="Product Name" Name="SUSE Liberty Linux 9">
        <FullProductName ProductID="SUSE Liberty Linux 9" CPE="cpe:/o:suse:sll:9">SUSE Liberty Linux 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 16.0">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 16.0">
        <FullProductName ProductID="SUSE Linux Enterprise Server 16.0" CPE="cpe:/o:suse:sles:16:16.0:server">SUSE Linux Enterprise Server 16.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Client Tools 15">
      <Branch Type="Product Name" Name="SUSE Manager Client Tools 15">
        <FullProductName ProductID="SUSE Manager Client Tools 15">SUSE Manager Client Tools 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Client Tools 15-BETA">
      <Branch Type="Product Name" Name="SUSE Manager Client Tools 15-BETA">
        <FullProductName ProductID="SUSE Manager Client Tools 15-BETA">SUSE Manager Client Tools 15-BETA</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy Module 4.2">
      <Branch Type="Product Name" Name="SUSE Manager Proxy Module 4.2">
        <FullProductName ProductID="SUSE Manager Proxy Module 4.2" CPE="cpe:/o:suse:sle-module-suse-manager-proxy:4.2">SUSE Manager Proxy Module 4.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy Module 4.3">
      <Branch Type="Product Name" Name="SUSE Manager Proxy Module 4.3">
        <FullProductName ProductID="SUSE Manager Proxy Module 4.3" CPE="cpe:/o:suse:sle-module-suse-manager-proxy:4.3">SUSE Manager Proxy Module 4.3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 8">
        <FullProductName ProductID="SUSE OpenStack Cloud 8" CPE="cpe:/o:suse:suse-openstack-cloud:8">SUSE OpenStack Cloud 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 9">
        <FullProductName ProductID="SUSE OpenStack Cloud 9" CPE="cpe:/o:suse:suse-openstack-cloud:9">SUSE OpenStack Cloud 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 8">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:8">SUSE OpenStack Cloud Crowbar 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.5">
      <Branch Type="Product Name" Name="openSUSE Leap 15.5">
        <FullProductName ProductID="openSUSE Leap 15.5" CPE="cpe:/o:opensuse:leap:15.5">openSUSE Leap 15.5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Tumbleweed">
      <Branch Type="Product Name" Name="openSUSE Tumbleweed">
        <FullProductName ProductID="openSUSE Tumbleweed" CPE="cpe:/o:opensuse:tumbleweed">openSUSE Tumbleweed</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ansible">
      <FullProductName ProductID="ansible" CPE="cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*">ansible</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-2.9.27-150000.1.17.2">
      <FullProductName ProductID="ansible-2.9.27-150000.1.17.2" CPE="cpe:2.3:a:redhat:ansible:2.9.27:*:*:*:*:*:*:*">ansible-2.9.27-150000.1.17.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-2.9.27-159000.3.12.2">
      <FullProductName ProductID="ansible-2.9.27-159000.3.12.2" CPE="cpe:2.3:a:redhat:ansible:2.9.27:*:*:*:*:*:*:*">ansible-2.9.27-159000.3.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.14.14-1.el9">
      <FullProductName ProductID="ansible-core-2.14.14-1.el9">ansible-core-2.14.14-1.el9</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.16-2.16.9-1.1">
      <FullProductName ProductID="ansible-core-2.16-2.16.9-1.1">ansible-core-2.16-2.16.9-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.16.3-1.1">
      <FullProductName ProductID="ansible-core-2.16.3-1.1">ansible-core-2.16.3-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.16.3-2.el8">
      <FullProductName ProductID="ansible-core-2.16.3-2.el8">ansible-core-2.16.3-2.el8</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.17-2.17.6-1.1">
      <FullProductName ProductID="ansible-core-2.17-2.17.6-1.1">ansible-core-2.17-2.17.6-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.18-2.18.10-2.1">
      <FullProductName ProductID="ansible-core-2.18-2.18.10-2.1">ansible-core-2.18-2.18.10-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.18.3-160000.2.2">
      <FullProductName ProductID="ansible-core-2.18.3-160000.2.2">ansible-core-2.18.3-160000.2.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-core-2.19-2.19.4-1.1">
      <FullProductName ProductID="ansible-core-2.19-2.19.4-1.1">ansible-core-2.19-2.19.4-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-doc">
      <FullProductName ProductID="ansible-doc">ansible-doc</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-doc-2.9.27-150000.1.17.2">
      <FullProductName ProductID="ansible-doc-2.9.27-150000.1.17.2">ansible-doc-2.9.27-150000.1.17.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-doc-2.9.27-159000.3.12.2">
      <FullProductName ProductID="ansible-doc-2.9.27-159000.3.12.2">ansible-doc-2.9.27-159000.3.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.14.14-1.el9">
      <FullProductName ProductID="ansible-test-2.14.14-1.el9">ansible-test-2.14.14-1.el9</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.16-2.16.9-1.1">
      <FullProductName ProductID="ansible-test-2.16-2.16.9-1.1">ansible-test-2.16-2.16.9-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.16.3-1.1">
      <FullProductName ProductID="ansible-test-2.16.3-1.1">ansible-test-2.16.3-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.16.3-2.el8">
      <FullProductName ProductID="ansible-test-2.16.3-2.el8">ansible-test-2.16.3-2.el8</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.17-2.17.6-1.1">
      <FullProductName ProductID="ansible-test-2.17-2.17.6-1.1">ansible-test-2.17-2.17.6-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.18-2.18.10-2.1">
      <FullProductName ProductID="ansible-test-2.18-2.18.10-2.1">ansible-test-2.18-2.18.10-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.19-2.19.4-1.1">
      <FullProductName ProductID="ansible-test-2.19-2.19.4-1.1">ansible-test-2.19-2.19.4-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible-test-2.9.27-150000.1.17.2">
      <FullProductName ProductID="ansible-test-2.9.27-150000.1.17.2">ansible-test-2.9.27-150000.1.17.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ansible1">
      <FullProductName ProductID="ansible1" CPE="cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*">ansible1</FullProductName>
    </Branch>
    <Relationship ProductReference="ansible-core-2.16.3-2.el8" RelationType="Default Component Of" RelatesToProductReference="SUSE Liberty Linux 8">
      <FullProductName ProductID="SUSE Liberty Linux 8:ansible-core-2.16.3-2.el8">ansible-core-2.16.3-2.el8 as a component of SUSE Liberty Linux 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.16.3-2.el8" RelationType="Default Component Of" RelatesToProductReference="SUSE Liberty Linux 8">
      <FullProductName ProductID="SUSE Liberty Linux 8:ansible-test-2.16.3-2.el8">ansible-test-2.16.3-2.el8 as a component of SUSE Liberty Linux 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.14.14-1.el9" RelationType="Default Component Of" RelatesToProductReference="SUSE Liberty Linux 9">
      <FullProductName ProductID="SUSE Liberty Linux 9:ansible-core-2.14.14-1.el9">ansible-core-2.14.14-1.el9 as a component of SUSE Liberty Linux 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.14.14-1.el9" RelationType="Default Component Of" RelatesToProductReference="SUSE Liberty Linux 9">
      <FullProductName ProductID="SUSE Liberty Linux 9:ansible-test-2.14.14-1.el9">ansible-test-2.14.14-1.el9 as a component of SUSE Liberty Linux 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.18.3-160000.2.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server 16.0:ansible-core-2.18.3-160000.2.2">ansible-core-2.18.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools 15">
      <FullProductName ProductID="SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2">ansible-2.9.27-150000.1.17.2 as a component of SUSE Manager Client Tools 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-doc-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools 15">
      <FullProductName ProductID="SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2">ansible-doc-2.9.27-150000.1.17.2 as a component of SUSE Manager Client Tools 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-2.9.27-159000.3.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools 15-BETA">
      <FullProductName ProductID="SUSE Manager Client Tools 15-BETA:ansible-2.9.27-159000.3.12.2">ansible-2.9.27-159000.3.12.2 as a component of SUSE Manager Client Tools 15-BETA</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-doc-2.9.27-159000.3.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools 15-BETA">
      <FullProductName ProductID="SUSE Manager Client Tools 15-BETA:ansible-doc-2.9.27-159000.3.12.2">ansible-doc-2.9.27-159000.3.12.2 as a component of SUSE Manager Client Tools 15-BETA</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy Module 4.3">
      <FullProductName ProductID="SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2">ansible-2.9.27-150000.1.17.2 as a component of SUSE Manager Proxy Module 4.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-doc-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy Module 4.3">
      <FullProductName ProductID="SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2">ansible-doc-2.9.27-150000.1.17.2 as a component of SUSE Manager Proxy Module 4.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.5">
      <FullProductName ProductID="openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2">ansible-2.9.27-150000.1.17.2 as a component of openSUSE Leap 15.5</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-doc-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.5">
      <FullProductName ProductID="openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2">ansible-doc-2.9.27-150000.1.17.2 as a component of openSUSE Leap 15.5</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.9.27-150000.1.17.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.5">
      <FullProductName ProductID="openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2">ansible-test-2.9.27-150000.1.17.2 as a component of openSUSE Leap 15.5</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.16.3-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-core-2.16.3-1.1">ansible-core-2.16.3-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.16-2.16.9-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-core-2.16-2.16.9-1.1">ansible-core-2.16-2.16.9-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.17-2.17.6-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-core-2.17-2.17.6-1.1">ansible-core-2.17-2.17.6-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.18-2.18.10-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-core-2.18-2.18.10-2.1">ansible-core-2.18-2.18.10-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-core-2.19-2.19.4-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-core-2.19-2.19.4-1.1">ansible-core-2.19-2.19.4-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.16.3-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-test-2.16.3-1.1">ansible-test-2.16.3-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.16-2.16.9-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-test-2.16-2.16.9-1.1">ansible-test-2.16-2.16.9-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.17-2.17.6-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-test-2.17-2.17.6-1.1">ansible-test-2.17-2.17.6-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.18-2.18.10-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-test-2.18-2.18.10-2.1">ansible-test-2.18-2.18.10-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-test-2.19-2.19.4-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:ansible-test-2.19-2.19.4-1.1">ansible-test-2.19-2.19.4-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:ansible">ansible as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:ansible1">ansible1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy Module 4.2">
      <FullProductName ProductID="SUSE Manager Proxy Module 4.2:ansible">ansible as a component of SUSE Manager Proxy Module 4.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy Module 4.2">
      <FullProductName ProductID="SUSE Manager Proxy Module 4.2:ansible-doc">ansible-doc as a component of SUSE Manager Proxy Module 4.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:ansible">ansible as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:ansible1">ansible1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:ansible1">ansible1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="ansible" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:ansible">ansible as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.</Note>
    </Notes>
    <CVE>CVE-2024-0690</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Liberty Linux 8:ansible-core-2.16.3-2.el8</ProductID>
        <ProductID>SUSE Liberty Linux 8:ansible-test-2.16.3-2.el8</ProductID>
        <ProductID>SUSE Liberty Linux 9:ansible-core-2.14.14-1.el9</ProductID>
        <ProductID>SUSE Liberty Linux 9:ansible-test-2.14.14-1.el9</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:ansible-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:ansible-doc-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:ansible-test-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 16.0:ansible-core-2.18.3-160000.2.2</ProductID>
        <ProductID>SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Manager Client Tools 15-BETA:ansible-2.9.27-159000.3.12.2</ProductID>
        <ProductID>SUSE Manager Client Tools 15-BETA:ansible-doc-2.9.27-159000.3.12.2</ProductID>
        <ProductID>SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2</ProductID>
        <ProductID>SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2</ProductID>
        <ProductID>openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2</ProductID>
        <ProductID>openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2</ProductID>
        <ProductID>openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-core-2.16.3-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-core-2.16-2.16.9-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-core-2.17-2.17.6-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-core-2.18-2.18.10-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-core-2.19-2.19.4-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-test-2.16.3-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-test-2.16-2.16.9-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-test-2.17-2.17.6-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-test-2.18-2.18.10-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:ansible-test-2.19-2.19.4-1.1</ProductID>
      </Status>
      <Status Type="Known Not Affected">
        <ProductID>HPE Helion OpenStack 8:ansible1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:ansible1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:ansible1</ProductID>
      </Status>
      <Status Type="Will Not Fix">
        <ProductID>HPE Helion OpenStack 8:ansible</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:ansible</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:ansible</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
