ansible-automation-platform/ee-minimal-rhel9 vulnerabilities
CVEs whose affected-version data names the ansible-automation-platform/ee-minimal-rhel9 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-9902Medium· 6.3PoCAnsible-core: ansible-core user may read/write unauthorized content
A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` modu…
▾ TwilightRed Hat · ansible-coreEPSS 0.26%via CVEORG
CVE-2024-8775Medium· 5.5A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without se…
▾ SunlitRed Hat · ansible-coreEPSS 0.27%via NVD