Red Hat Security Advisory

RHSA-2024:8969

Red Hat Ansible Automation Platform Execution Environments Container Release Update

Released 2024-11-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Ansible Automation Platform Execution Environments ansible-automation-platform/ansible-builder-rhel8, ansible-automation-platform/ansible-builder-rhel9, ansible-automation-platform/ee-29-rhel8 +2

Fixes 2 records

TI-2024-09186 CVE-2024-9902 · GHSA-32p4-gm2c-wmch

Ansible-core: ansible-core user may read/write unauthorized content

LOW 30

A flaw was found in Ansible.

CVSS 3.1MEDIUM 6.3 Local Low privileges User interaction EPSS 0.0025 Published 2024-11-06 Fixed in 2.14.18rc1, 2.15.13rc1 +13 CWE-863

TI-2024-08141 CVE-2024-8775 · GHSA-jpxc-vmjf-9fcj

Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

LOW 24

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00271 Published 2024-09-14 Partial fix · 1.2.0-91, 3.0.1-95 +10 CWE-532