Lucene search
+L

490 matches found

OSV
OSV
added 2025/08/31 10:13 a.m.6 views

RHSA-2025:14686 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

7.1CVSS7.8AI score0.01485EPSS
SaveExploits5References19
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.3 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:14686)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14686 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

8.8CVSS7.5AI score0.01485EPSS
SaveExploits5References7
RedHat Linux
RedHat Linux
added 2025/08/26 9:2 p.m.6 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS6.9AI score0.01485EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2025/08/08 12:0 a.m.9 views

IBM Cloud Pak for Business Automation 安全漏洞

IBM Cloud Pak for Business Automation is an enterprise-class business process automation platform from IBM that provides intelligent document processing, workflow management and decision automation. A security vulnerability exists in IBM Cloud Pak for Business Automation that originates from a us...

6.5CVSS6.3AI score0.00256EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-4237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2key module prints out the private key directly to the standard output...

7.8CVSS7.1AI score0.00239EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/05 10:22 a.m.8 views

RHSA-2025:12772 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

5.3CVSS6.1AI score0.00249EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2025/08/04 11:16 p.m.6 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

7.5CVSS6.2AI score0.00511EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/08/04 6:2 p.m.7 views

python3.11-django-ansible-base: Sensitive Authenticator Secrets Returned in Clear Text via API in AAP

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS5.7AI score0.00207EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/08/04 6:2 p.m.14 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

5.3CVSS5.9AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/04 12:0 a.m.7 views

Red Hat Ansible Automation Platform 安全漏洞

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat USA. A security vulnerability exists in Red Hat Ansible Automation Platform that stems from a failure to perform CSRF origin checking on requests, which could lead to a cross-site...

5.3CVSS6.4AI score0.00249EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/04 12:0 a.m.13 views

PT-2025-31820 · Unknown · Ansible Aap-Gateway

Name of the Vulnerable Software and Affected Versions: Ansible aap-gateway affected versions not specified Description: A flaw exists in Ansible aap-gateway where cross-site request forgery CSRF origin checking is not performed on requests originating from the gateway to external components,...

5.3CVSS6.1AI score0.00249EPSS
SaveExploits0References8
NVD
NVD
added 2025/07/31 2:15 p.m.10 views

CVE-2025-7738

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS0.00207EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/07/31 2:12 p.m.10 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS6.2AI score0.00207EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/07/31 2:12 p.m.19 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS0.00207EPSS
SaveExploits0References5
CVE
CVE
added 2025/07/31 2:12 p.m.33 views

CVE-2025-7738

CVE-2025-7738 affects Red Hat Ansible Automation Platform (AAP) where the Gateway API exposes the client secret for certain GitHub Enterprise authenticators. The underlying issue is that sensitive authenticator secrets are returned in clear text via the API, with exposure limited to privileged us...

4.4CVSS6.8AI score0.00207EPSS
SaveExploits0References5
OSV
OSV
added 2025/07/31 2:12 p.m.8 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS5.9AI score
SaveExploits0References9
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.4 views

Red Hat Ansible Automation Platform(Red Hat AAP) 安全漏洞

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat, Inc. A security vulnerability exists in Red Hat Ansible Automation Platform Red Hat AAP that stems from the Gateway API returning plaintext client keys, which could lead to the...

4.4CVSS6.2AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.4 views

HPE Telco Service Activator 安全漏洞

HPE Telco Service Activator is a workflow automation platform that enables automated service turn-up from HPE America. A security vulnerability exists in HPE Telco Service Activator that stems from vulnerability to cross-site scripting attacks...

3.5CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.6 views

PT-2025-31524

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform AAP affected versions not specified Description A flaw exists in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This affec...

4.9CVSS6.3AI score0.00207EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.5 views

Red Hat Ansible Automation Platform 安全漏洞

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat, USA. A security vulnerability exists in Red Hat Ansible Automation Platform that originates from exposing a WebSocket JSON web token in debug mode, which could lead to accessing...

6.7AI score
SaveExploits0References1
Rows per page
Query Builder