CVE-2022-3697

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3697
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3697.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3697
Aliases
Downstream
Published
2022-10-28T00:00:00Z
Modified
2026-08-26T11:45:56Z
Summary
[none]
Details

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-233"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3697.json"
}
References

Affected packages

Git
github.com/ansible-collections/amazon.aws

Affected ranges

Type
GIT
Repo
https://github.com/ansible-collections/amazon.aws
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e68f0e1c573a76efc4b2e40e6f4acdc8e8310729
Introduced
013162a952c7b2d11c7e2ebf443d8d4d7a21e95a
Fixed
54ce7db8fc4169e7a8c048d75a313bb7fd9e5d48
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:redhat:ansible_collection:*:*:*:*:*:community_aws:*:*",
        "cpe:2.3:a:redhat:ansible_collection:*:*:*:*:*:aws:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.0"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "5.1.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.1.2
1.*
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.4.1
1.5.0
2.*
2.1.0
3.*
3.0.0
4.*
4.0.0
5.*
5.0.0
5.0.1
5.0.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3697.json"
github.com/ansible-collections/community.aws

Affected ranges

Type
GIT
Repo
https://github.com/ansible-collections/community.aws
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ee984b2b972275bbc4e6a011ed9046d497689e16
Introduced
bf3a4c6818223d68c3961dbd242f992c872e0b9d
Fixed
751dcb28368703693a49e8cea371fd467dd12d92
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:redhat:ansible_collection:*:*:*:*:*:community_aws:*:*",
        "cpe:2.3:a:redhat:ansible_collection:*:*:*:*:*:aws:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.0"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "5.1.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.1.2
1.*
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
2.*
2.1.0
3.*
3.0.0
3.0.1
4.*
4.0.0
5.*
5.0.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3697.json"
github.com/ansible/ansible

Affected ranges

Type
GIT
Repo
https://github.com/ansible/ansible
Events
Introduced
2c2dd1a1b3eca6248979e04e70afff6dd3fcf366
Fixed
a6ed9551320b5f9d2a15a69e4c8b22ee31f0f778
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.5.0"
        },
        {
            "fixed": "2.10.0"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3697.json"