Red Hat Security Advisory

RHSA-2024:11145

Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Released 2024-12-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.14-1.el8ap, automation-gateway-server-2.5.20241218-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.14-1.el9ap, automation-gateway-server-2.5.20241218-1.el9ap

Fixes 2 records

TI-2024-10266 CVE-2024-11079 · GHSA-99w6-3xph-cx78

Ansible-core: unsafe tagging bypass via hostvars object in ansible-core

LOW 25

A flaw was found in Ansible-Core.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00529 Published 2024-11-11 Partial fix · 1.2.0-93, 3.0.1-108 +8 CWE-20

TI-2024-10634 CVE-2024-11483 · GHSA-q73v-w388-wp95

Automation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5

LOW 23

A vulnerability was found in the Ansible Automation Platform (AAP).

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00524 Published 2024-11-25 Fixed in 2.5.20241218-1.el8ap, 2.5.20241218-1.el9ap CWE-284