{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T10:03:13.844","vulnerabilities":[{"cve":{"id":"CVE-2025-2877","sourceIdentifier":"secalert@redhat.com","published":"2025-03-28T14:15:21.877","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to \"debug\", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any \"debug\" action in a rulebook and also affects Event Streams."},{"lang":"es","value":"Se detectó una falla en Ansible Automation Platform's Event-Driven Ansible. En configuraciones donde el nivel de detalle está configurado como \"depuración\", las contraseñas de inventario se exponen en texto plano al iniciar la activación de un libro de reglas. Este problema existe para cualquier acción de \"depuración\" en un libro de reglas y también afecta a los flujos de eventos."}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1295"}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:3636","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:3637","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-2877","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355540","source":"secalert@redhat.com"},{"url":"https://github.com/ansible/ansible-rulebook/pull/767","source":"secalert@redhat.com"}]}}]}