WID-SEC-W-2024-1328

WID-SEC-W-2024-1328 PUBLISHED CVSS 9.300000190734863 CRITICAL

Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand erzeugen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
	Red Hat Ansible Automation Platform <2.4
	Red Hat Enterprise Linux
	Dell PowerProtect Data Domain <7.10.1.70
	Dell PowerProtect Data Domain 8.4.0.0
	Gentoo Linux
	Fedora Linux
	Dell PowerProtect Data Domain <7.13.1.40
	Red Hat Satellite 6.15
	SUSE Linux
	Red Hat Ansible Automation Platform 2.4
	Dell PowerProtect Data Domain <8.4.0.0
	Dell PowerProtect Data Domain 7.13.1.40
	Amazon Linux 2
	Oracle Linux
	RESF Rocky Linux
	Dell PowerProtect Data Domain 7.10.1.70
	Red Hat Enterprise Linux Update Infrastructure 4
	Debian Linux
	Dell PowerProtect Data Domain 8.3.1.10
	Dell PowerProtect Data Domain <8.3.1.10

Timeline

Jun 10, 2024 CVE Published
Oct 19, 2025 CVE Updated
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch
Nov 1, 2026 Distribution Patch

References

…and 27 more

Open in Interactive Console →