CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.14.18rc1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.15.0b1",
        "lessThan": "2.15.13rc1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.16.0b1",
        "lessThan": "2.16.13rc1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.17.0b1",
        "lessThan": "2.17.6rc1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.18.0b1",
        "lessThan": "2.18.0rc2",
        "versionType": "custom"
      }
    ],
    "packageName": "ansible-core",
    "collectionURL": "https://github.com/ansible/ansible",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ansible-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "3.0.1-96",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el9",
      "cpe:/a:redhat:ansible_core:2::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ansible-builder-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "3.0.1-95",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el9",
      "cpe:/a:redhat:ansible_core:2::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-29-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.9.27-32",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el9",
      "cpe:/a:redhat:ansible_core:2::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-minimal-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.14.13-21",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el9",
      "cpe:/a:redhat:ansible_core:2::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Ansible Automation Platform Execution Environments",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "ansible-automation-platform/ee-minimal-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.17.6-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_core:2::el9",
      "cpe:/a:redhat:ansible_core:2::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.15.13-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.15.13-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
      "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.16.13-1.el8ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1:2.16.13-1.el9ap",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9",
      "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
      "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openstack-ansible-core",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.14.2-4.6.el9ost",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openstack:17.1::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "ansible-core",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  }
]