Red Hat Ansible Automation Platform Execution Environments vulnerabilities

3 CVEs affecting Red Hat Ansible Automation Platform Execution Environments, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-11079, published 2024-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-11079, published 2024-11-12. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to…
CVE-2024-8775, published 2024-09-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as…
CVE-2024-9902, published 2024-11-06. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a…