CVE-2021-33923: Medium severity confluent cp-ansible vulnerability
Published Sep 29, 2021
·Updated
Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).
Affected Software
4 affected components
Confluent cp-ansible=5.5.0
Confluent cp-ansible=5.5.1
Confluent cp-ansible=5.5.2
Confluent cp-ansible=6.0.0
Event History
Sep 29, 2021
CVE Published
via MITRE·09:44 AM
Data Sourced
via MITRE·09:44 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-33923?
CVE-2021-33923 is considered to have a medium severity due to the potential unauthorized access to sensitive information.
2
How do I fix CVE-2021-33923?
To fix CVE-2021-33923, update Confluent Ansible to version 6.0.1 or later.
3
What versions of Confluent Ansible are affected by CVE-2021-33923?
CVE-2021-33923 affects Confluent Ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0.
4
What kind of sensitive information is exposed by CVE-2021-33923?
CVE-2021-33923 can expose private keys and the state database to local attackers.
5
Can I mitigate CVE-2021-33923 without upgrading?
Mitigating CVE-2021-33923 without upgrading is not recommended, as proper permissions configuration may not fully eliminate the risk.