Wiz Agents & Workflows are here
Wiz
Vulnerability DatabaseCVE-2022-3697

CVE-2022-3697: 
Ansible vulnerability analysis and mitigation

Overview

A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This vulnerability, identified as CVE-2022-3697, was disclosed in October 2022. The vulnerability affects the Ansible automation platform and its amazon.aws collection (MITRE CVE, NVD).

Technical details

The vulnerability stems from insecure handling of the tower_callback parameter in the amazon.aws.ec2_instance module. The module processes this parameter in an unsafe manner, which results in password information being exposed in log files (Red Hat Portal).

Impact

The primary impact of this vulnerability is the potential exposure of sensitive information. When exploited, the flaw leads to password leakage in system logs, compromising the confidentiality of authentication credentials (Ubuntu Security).

Mitigation and workarounds

The issue has been addressed in various Ansible versions. For Debian 10 (buster), the fix is included in version 2.7.7+dfsg-1+deb10u2. Ubuntu has also released security updates for affected versions including Ubuntu 18.04 LTS, 20.04 LTS, and 22.04 LTS (Debian LTS).

Additional resources

Source: This report was generated using AI

Related Ansible vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2024-1313MEDIUM6.5
  • GrafanaGrafana
  • grafana-debugsource
NoYesMar 26, 2024
CVE-2024-9902MEDIUM6.3
  • AnsibleAnsible
  • ansible-operator
NoYesNov 06, 2024
CVE-2025-14010MEDIUM5.5
  • AnsibleAnsible
  • ansible
NoYesDec 04, 2025
CVE-2024-11079MEDIUM5.5
  • AnsibleAnsible
  • ansible
NoYesNov 12, 2024
CVE-2024-8775MEDIUM5.5
  • AnsibleAnsible
  • ansible-core
NoYesSep 14, 2024

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo