| Package | Affected versions | Patched versions |
|---|---|---|
| ansible automation platform | < 2.6 | 2.6 |
| ansible developer | = 1.2= 1.3 | |
| ansible inside | = 1.3= 1.4 |
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free