Advisories · Technology
Red Hat Ansible Automation Platform Ansible Core 2.
Every CVE that names Red Hat Ansible Automation Platform Ansible Core 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform Ansible Core 2
- Path traversal
- CVSS 8.8 High
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
- Red Hat Migration Toolkit for Applications 8
- Red Hat Migration Toolkit for Virtualization
- Path traversal
- CVSS 6.4 Medium
Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions
- Red Hat Ansible Automation Platform 2.16
- Red Hat Ansible Automation Platform 2.18
- Broken access control