Red Hat Security AdvisoryRHSA-2024:6428
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2024-09-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-4.5.10-1.el8ap, automation-controller-cli-4.5.10-1.el8ap, automation-controller-server-4.5.10-1.el8ap +7
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-4.5.10-1.el9ap, automation-controller-cli-4.5.10-1.el9ap, automation-controller-server-4.5.10-1.el9ap +8
Fixes 13 records
Priority MEDIUM 62
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.28637 · Published 2024-07-10 · Partial fix · 5.0.7, 4.2.14 CWE-130
Priority MEDIUM 62
python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00307 · Published 2024-04-25 · Fixed in 3.4.0 CWE-327
Priority MEDIUM 52
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01503 · Published 2024-08-07 · Partial fix · 5.0.8, 4.2.15 CWE-89
Priority MEDIUM 41
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00954 · Published 2024-08-07 · Partial fix · 5.0.8, 4.2.15 CWE-130
Priority MEDIUM 41
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01258 · Published 2024-08-07 · Partial fix · 5.0.8, 4.2.15 CWE-130
Priority MEDIUM 41
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.012 · Published 2024-08-07 · Partial fix · 5.0.8, 4.2.15 CWE-400
Priority MEDIUM 41
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01187 · Published 2024-07-10 · Partial fix · 4.2.14, 5.0.7 CWE-130
Priority LOW 32
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00889 · Published 2024-07-10 · Partial fix · 5.0.7, 4.2.14 CWE-208
Priority LOW 32
An improper authorization flaw exists in the Ansible Automation Controller.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00428 · Published 2024-09-12 · Fixed in 4.5.10-1, 4.5.10-1.el8ap +1 CWE-285
Priority LOW 27
It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00222 · Published 2024-08-06 · Partial fix CWE-440
Priority LOW 27
A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1.
CVSS 3.0MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00236 · Published 2024-07-09 · Partial fix · 3.19.1 CWE-835
Priority LOW 23
Python Social Auth is a social authentication/registration mechanism.
CVSS 3.1MEDIUM 4.9· Network · Low privileges · No interaction · EPSS 0.00581 · Published 2024-04-24 · Partial fix · 5.4.1 CWE-178
Priority LOW 22
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01008 · Published 2024-07-10 · Partial fix · 5.0.7, 4.2.14 CWE-22