Red Hat Ansible Collection vulnerabilities

2 CVEs affecting Red Hat Ansible Collection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4237, published 2023-10-04.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-3697, published 2022-10-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue…
• CVE-2023-4237, published 2023-10-04. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch…