Red Hat Ansible Automation Platform 2.4 For Rhel 9

Red Hat Ansible Automation Platform: Reliance on Untrusted Inputs in a Security Decision

also in 7 other products

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

also in 33 other products

Red Hat Ansible Automation Platform: Argument Injection

also in 7 other products

Red Hat Ansible Automation Platform: Missing Authorization

also in 7 other products

Red Hat Ansible Automation Platform: Incomplete List of Disallowed Inputs

also in 7 other products

Red Hat Ansible Automation Platform: Server-Side Request Forgery (SSRF)

also in 7 other products

Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

also in 6 other products

Hub: insecure galaxy-importer tarfile extraction

also in 5 other products

Controller: html injection in custom login info

also in 4 other products

Ansible: template injection

also in 7 other products

Platform: token exposed at importing project

also in 4 other products

Platform: insecure websocket used when interacting with eda server

also in 1 other product

Ansible-rulebook: Debug Messages Revealing Unnecessary Information

also in 3 other products

Automation-controller: gain access to the k8s api server via job execution with container group

also in 1 other product

Platform: ec2_key module prints out the private key directly to the standard output

also in 2 other products

Ansible-core: ansible-core user may read/write unauthorized content

also in 6 other products

Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

also in 8 other products

Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration

also in 9 other products