CVE-2024-11079 Ansible-core: unsafe tagging bypass via hostvars object in ansible-core

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "2.18.0"
      }
    ],
    "packageName": "ansible-core",
    "collectionURL": "https://github.com/ansible/ansible",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ansible-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "3.0.1-107",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el8",
      "cpe:/a:redhat:ansible_core:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ansible-builder-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "3.0.1-108",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el8",
      "cpe:/a:redhat:ansible_core:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-29-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.9.27-34",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el8",
      "cpe:/a:redhat:ansible_core:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-minimal-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.17.7-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el8",
      "cpe:/a:redhat:ansible_core:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-minimal-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.16.14-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el8",
      "cpe:/a:redhat:ansible_core:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.16.14-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.16.14-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux AI (RHEL AI)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhelai1/bootc-azure-nvidia-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:enterprise_linux_ai:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux AI (RHEL AI)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhelai1/bootc-nvidia-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:enterprise_linux_ai:1"
    ]
  }
]