{"id":"CVE-2021-33924","details":"Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.","modified":"2026-07-08T22:14:45.397258Z","published":"2021-09-29T10:15:07.747Z","references":[{"type":"ADVISORY","url":"https://confluent.io"},{"type":"ADVISORY","url":"https://www.detack.de/en/cve-2021-33924"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/confluentinc/cp-ansible","events":[{"introduced":"d62339f3ca69eb3958bbf4be6eae97f014134780"},{"last_affected":"9c7954d5d32bb5d6aa5e84f9d9570a5ee6ba54bb"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:confluent:ansible:5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:confluent:ansible:5.5.1:*:*:*:*:*:*:*","cpe:2.3:a:confluent:ansible:5.5.2:*:*:*:*:*:*:*","cpe:2.3:a:confluent:ansible:6.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.5.0"},{"last_affected":"5.5.0"},{"introduced":"5.5.1"},{"last_affected":"5.5.1"},{"introduced":"5.5.2"},{"last_affected":"5.5.2"},{"introduced":"6.0.0"},{"last_affected":"6.0.0"}]}}],"versions":["5.5.0","5.5.1","5.5.2","6.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33924.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}