Advisories · Technology
Red Hat Self-service automation portal 2.
Every CVE that names Red Hat Self-service automation portal 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
- Red Hat Migration Toolkit for Applications 8
- Red Hat Migration Toolkit for Virtualization
- Path traversal
- CVSS 8.8 High
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
- Red Hat Migration Toolkit for Applications 8
- Red Hat Migration Toolkit for Virtualization
- Path traversal