PT-2024-16742

🗓️ 11 Nov 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Flaw in Ansible-Core 2.x allows code execution via unsafe `hostvars` object; update to mitigate risks.

Reporter	Title	Published	Views	Family All 408
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Operator package issues	2 Apr 202517:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to multiple Operator package issues	1 May 202521:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2024-11079)	28 May 202615:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Cartridge for IBM Cloud Pak for Data 4.8.1 is affected but not considered vulnerable to multiple vulnerabilities	26 Dec 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	26 Mar 202518:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Ansible - CVE-2023-5115	28 Mar 202411:50	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	31 May 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in CPython used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-7592,CVE-2024-6232,CVE-2024-8775)	4 Apr 202509:18	–	ibm

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-ansible-core-cve-2024-11079-cve-2024-8775
github	www.github.com/ansible/ansible/pull/84339
github	www.github.com/advisories/GHSA-99w6-3xph-cx78
access	www.access.redhat.com/errata/RHSA-2024:10770
suse	www.suse.com/security/cve/CVE-2024-11079
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/FXA2MCVUX3VSCGBZXXKTPPRDV3YDJUJW
t	www.t.me/cvedetector/10556
twitter	www.twitter.com/transilienceai/status/1857291995808506290
redos	www.redos.red-soft.ru/support/secure
access	www.access.redhat.com/errata/RHSA-2024:11145

21 Nov 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.15.5 - 7.8

EPSS0.0066

SSVC

ansible-core version 2.x code execution flaw unsafe content protections hostvars object security update