CVE-2023-4380: Red Hat Ansible Automation Platform

Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

Affected products

• Red Hat Ansible Automation Platform: version 2.4 only
• Red Hat Ansible Developer: version 1.1 only
• Red Hat Ansible Inside: version 1.2 only

Published 2023-10-04. Last modified 2026-06-17.