Read the docs
TI-2023-03687 Aliases CVE-2023-3971GHSA-p5xq-xr8f-3wj4

Controller: html injection in custom login info

Priority LOW 34CWE-80Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-80.

Summary

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00816 57th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Ansible Automation Platform 2.3 for RHEL 8—4.3.11-1.el8apPatch availableCNA
Red HatRed Hat Ansible Automation Platform 2.3 for RHEL 9—4.3.11-1.el9apPatch availableCNA
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 8—4.4.1-1.el8apPatch availableCNA
Red HatRed Hat Ansible Automation Platform 2.4 for RHEL 9—4.4.1-1.el9apPatch availableCNA
  • Red Hat Ansible Automation Platform 2.3 for RHEL 8 VendorRed Hat Affected — Fixed in 4.3.11-1.el8ap Patch available CNA
  • Red Hat Ansible Automation Platform 2.3 for RHEL 9 VendorRed Hat Affected — Fixed in 4.3.11-1.el9ap Patch available CNA
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8 VendorRed Hat Affected — Fixed in 4.4.1-1.el8ap Patch available CNA
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9 VendorRed Hat Affected — Fixed in 4.4.1-1.el9ap Patch available CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:redhat:ansible_automation_controller:*:*:*:*:*:*:*:*before 4.3.11VulnerableRed Hat
cpe:2.3:a:redhat:ansible_automation_controller:4.4:*:*:*:*:*:*:*4.4VulnerableRed Hat
cpe:2.3:a:redhat:ansible_automation_platform:2.3:*:*:*:*:*:*:*2.3VulnerableRed Hat
cpe:2.3:a:redhat:ansible_automation_platform:2.4:*:*:*:*:*:*:*2.4VulnerableRed Hat
cpe:2.3:a:redhat:ansible_developer:1.0:*:*:*:*:*:*:*1.0VulnerableRed Hat
cpe:2.3:a:redhat:ansible_inside:1.1:*:*:*:*:*:*:*1.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0Running onRed Hat
  • cpe:2.3:a:redhat:ansible_automation_controller:*:*:*:*:*:*:*:* Versions before 4.3.11 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_automation_controller:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_automation_platform:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_automation_platform:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_developer:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_inside:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2023:4590 Released 2023-08-09 · Red Hat rating Moderate
    Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.3 for RHEL 8 automation-controller-4.3.11-1.el8ap, automation-controller-cli-4.3.11-1.el8ap, automation-controller-server-4.3.11-1.el8ap +2
    • Red Hat Ansible Automation Platform 2.3 for RHEL 9 automation-controller-4.3.11-1.el9ap, automation-controller-cli-4.3.11-1.el9ap, automation-controller-server-4.3.11-1.el9ap +2
  • RHSA-2023:4340 Released 2023-07-31 · Red Hat rating Moderate
    Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-4.4.1-1.el8ap, automation-controller-cli-4.4.1-1.el8ap, automation-controller-server-4.4.1-1.el8ap +2
    • Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-4.4.1-1.el9ap, automation-controller-cli-4.4.1-1.el9ap, automation-controller-server-4.4.1-1.el9ap +2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ansible Automation Platform 2.3 for RHEL 8Fixed RHSA-2023:4590
Red Hat Ansible Automation Platform 2.3 for RHEL 9Fixed RHSA-2023:4590
Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed RHSA-2023:4340
Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed RHSA-2023:4340
Not affected: 2 products
  • Red Hat Ansible Automation Platform 2.3 for RHEL 8
  • Red Hat Ansible Automation Platform 2.3 for RHEL 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-3971
  2. 2026-10-03 Alias added: GHSA-p5xq-xr8f-3wj4

References

Advisory 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences