CVE-2021-33924: Critical severity ansible vulnerability

Published Sep 29, 2021

Updated

Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.

Affected Software

4 affected components

Confluent Ansible=5.5.0

Confluent Ansible=5.5.1

Confluent Ansible=5.5.2

Confluent Ansible=6.0.0

Event History

Sep 29, 2021

CVE Published

via MITRE·09:44 AM

Data Sourced

via MITRE·09:44 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-33924?

CVE-2021-33924 has a high severity rating due to its potential for unauthorized access to sensitive information.

How does CVE-2021-33924 affect Confluent Ansible?

CVE-2021-33924 affects Confluent Ansible versions 5.5.0, 5.5.1, 5.5.2, and 6.0.0 by allowing incorrect access control through an auxiliary component.

How do I fix CVE-2021-33924?

To fix CVE-2021-33924, upgrade Confluent Ansible to a version that is not affected by this vulnerability.

Who is impacted by CVE-2021-33924?

Organizations using Confluent Ansible versions 5.5.0, 5.5.1, 5.5.2, or 6.0.0 are at risk from CVE-2021-33924.

What can attackers do with CVE-2021-33924?

Attackers exploiting CVE-2021-33924 can gain unauthorized access to sensitive information within affected versions of Confluent Ansible.