Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ansible-core

A security update for ansible-core addresses a possible information leak vulnerability (CVE-2024-0690) in tasks that ignore the ANSIBLE_NO_LOG configuration. This vulnerability could allow sensitive information to be exposed unintentionally during task execution. The update to ansible-core version 2.16.3 includes this security fix along with other bug fixes and enhancements. The issue affects Red Hat Enterprise Linux 8 and related distributions. Red Hat has rated the security impact as moderate and has released updated packages to remediate the vulnerability.

CVE-2024-0690 is a vulnerability in ansible-core where tasks that ignore the ANSIBLE_NO_LOG configuration may cause a possible information leak. Ansible is a configuration management and deployment tool that operates over SSH without requiring agents on remote nodes. The vulnerability relates to improper handling of logging suppression, potentially exposing sensitive data. Red Hat has released ansible-core version 2.16.3 for Red Hat Enterprise Linux 8 to fix this issue, along with rebuilding the package with Python 3.12 and other bug fixes.

Detailed information about Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update affecting Red Hat Product Security Red Hat. Get rea

Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:3043

https://access.redhat.com/security/updates/classification/#moderate

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index

2259013

RHEL-18965

RHEL-19297

RHEL-23782

RHEL-24141

Canonical URL

Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

CVE-2024-0690 is an information disclosure vulnerability identified in ansible-core versions 2.14.0, 2.15.0, and 2.16.0. The root cause is the failure of ansible-core to fully respect the ANSIBLE_NO_LOG configuration setting in certain scenarios, particularly when processing loop items in tasks. ANSIBLE_NO_LOG is intended to suppress sensitive output from being logged to prevent exposure of confidential information such as passwords, API keys, or decrypted secrets. However, due to improper output neutralization, sensitive data can still appear in logs or output streams, undermining the confidentiality guarantees of the automation process. The vulnerability requires local access with low privileges and some user interaction, limiting remote exploitation. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) indicates that the attack vector is local, with low attack complexity, requiring privileges and user interaction, and results in high confidentiality impact but no integrity or availability impact. No public exploits have been reported yet, but the flaw poses a risk in environments where ansible-core is used to manage sensitive infrastructure or secrets. The issue is particularly relevant for organizations automating deployments or configurations that handle sensitive credentials or secrets, as these could be inadvertently exposed in logs accessible to unauthorized users.

Detailed information about CVE-2024-0690: Improper Output Neutralization for Logs. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0690: Improper Output Neutralization for Logs - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0690: Improper Output Neutralization for Logs


Red Hat Security Advisory: ansible-core bug fix, enhancement, and security updateCVE-2024-0690 0 A security update for ansible-core addresses a possible information leak vulnerability (CVE-2024-0690) in tasks that ignore the ANSIBLE_NO_LOG configuration. This vulnerability could allow sensitive information to be exposed unintentionally during task execution. The update to ansible-core version 2.16.3 includes this security fix along with other bug fixes and enhancements. The issue affects Red Hat Enterprise Linux 8 and related distributions. Red Hat has rated the security impact as moderate and has released updated packages to remediate the vulnerability. MediumVulnerability#gcve #csaf #cve-2024-0690 Join the discussion	GCVE Database	05/22/2024, 10:18:55 UTC Added: 06/02/2026, 21:44:03 UTC
CVE-2024-0690: Improper Output Neutralization for LogsCVE-2024-0690 0 An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2024-0690 Join the discussion	CVE Database V5	02/06/2024, 12:00:28 UTC Added: 10/08/2025, 13:35:09 UTC

Threats Tagged 'cve-2024-0690'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-0690'

Lead Pen Test Professional