Red Hat Ansible Automation Platform 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Ansible Automation Platform (3e4a8374-ae9b-50c3-8112-003942296972) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53862 |
vulnerable | 2026-06-08 07:31:15.868949 |
Aap: aap-gateway: automation-hub: sensitive information disclosure
LOW (3.5)
A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data that may contain important information.
Published: 2025-07-11T12:34:24.020Z
Updated: 2025-11-21T07:36:54.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53861 |
vulnerable | 2026-06-08 07:31:15.868528 |
Aap: sensitive cookie(s) set without security flags
LOW (3.1)
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data.
Published: 2025-07-11T12:44:17.837Z
Updated: 2025-11-21T07:36:54.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7143 |
not_vulnerable | 2026-06-08 06:58:21.358931 |
Pulpcore: rbac permissions incorrectly assigned in tasks that create objects
MEDIUM (6.7)
A flaw was found in the Pulp package. When a role-based access control (RBAC) object in Pulp is set to assign permissions on its creation, it uses the `AutoAddObjPermsMixin` (typically the add_roles_for_object_creator method). This method finds the object creator by checking the current authenticated user. For objects that are created within a task, this current user is set by the first user with any permissions on the task object. This means the oldest user with model/domain-level task permissions will always be set as the current user of a task, even if they didn't dispatch the task. Therefore, all objects created in tasks will have their permissions assigned to this oldest user, and the creating user will receive nothing.
Published: 2024-08-07T16:49:29.842Z
Updated: 2026-06-02T15:17:14.856Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5189 |
vulnerable | 2026-06-08 06:19:42.801526 |
Hub: insecure galaxy-importer tarfile extraction
MEDIUM (6.3)
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.
Published: 2023-11-14T22:57:00.584Z
Updated: 2025-11-20T17:30:17.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50782 |
vulnerable | 2026-06-08 06:16:16.668570 |
Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
HIGH (7.5)
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Published: 2024-02-05T20:45:49.705Z
Updated: 2026-03-24T11:28:21.353Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4237 |
vulnerable | 2026-06-08 06:16:11.874228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.210757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3644 |
vulnerable | 2026-06-08 05:48:21.596585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3205 |
vulnerable | 2026-06-08 05:47:19.717073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2568 |
vulnerable | 2026-06-08 05:43:35.824482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1632 |
vulnerable | 2026-06-08 05:39:13.608582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4112 |
vulnerable | 2026-06-08 05:38:08.442912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.