TI-2025-05410 CVE-2025-5988 · GHSA-w8g9-rc94-7pq8
Aap-gateway: csrf origin checking is disabled
Priority LOW 24
A flaw was found in the Ansible aap-gateway.
RHSA-2025:12772
Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Released 2025-08-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-gateway-server-2.5.20250730-2.el8ap, python3.11-django-ansible-base-2.5.20250730-1.el8ap
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-gateway-server-2.5.20250730-2.el9ap, python3.11-django-ansible-base-2.5.20250730-1.el9ap
Fixes 2 records
TI-2025-07063 CVE-2025-7738 · GHSA-qgmq-rhmw-xw3r
Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap
Priority LOW 20
A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text.