Red Hat Security Advisory

RHSA-2024:9894

Red Hat Ansible Automation Platform 2.5 Product Release Update

Released 2024-11-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.13-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.13-1.el9ap

Fixes 2 records

TI-2024-09186 CVE-2024-9902 · GHSA-32p4-gm2c-wmch

Ansible-core: ansible-core user may read/write unauthorized content

LOW 30

A flaw was found in Ansible.

CVSS 3.1MEDIUM 6.3 Local Low privileges User interaction EPSS 0.0025 Published 2024-11-06 Fixed in 2.14.18rc1, 2.15.13rc1 +13 CWE-863

TI-2024-08141 CVE-2024-8775 · GHSA-jpxc-vmjf-9fcj

Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

LOW 24

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00271 Published 2024-09-14 Partial fix · 1.2.0-91, 3.0.1-95 +10 CWE-532