VDB
BDU%3A2024-01785
BDU%3A2024-01785
PUBLISHED
CVSS 8.100000381469727 HIGH
Уязвимость пакетов automation-eda-controller/ansible-rulebook/ansible-automation-platform-installer платформы автоматизации Red Hat Ansible Automation Platform, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 0:1.0.5-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 0:1.0.5-1.el9ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | 0:2.4-6.el9ap |
| 0 | ||
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 0:1.0.5-1.el8ap |
| Red Hat Inc. | Red Hat Ansible Automation Platform | |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 0:1.0.5-1.el8ap |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | 0:2.4-6.el8ap |
Timeline
- Feb 29, 2024 PoC Published
- Mar 6, 2024 CVE Published
- Jun 11, 2026 Distribution Patch
- Jun 11, 2026 Security Advisory
References
- RHSA-2024:1057 vendor-advisory
- RHBZ#2265085 issue
- https://vuldb.com/ru/?id.255317 url
- https://access.redhat.com/security/cve/CVE-2024-1657 advisory