Ansible-Core vulnerable to content protections bypass

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-11079 · ADVISORY
• ansible/ansible#84299 · WEB
• ansible/ansible#84339 · WEB
• ansible/ansible commit 2936b80 · WEB
• ansible/ansible commit 70e83e7 · WEB
• ansible/ansible commit 98774d1 · WEB
• access.redhat.com/errata/RHSA-2024:10770 · WEB
• access.redhat.com/errata/RHSA-2024:11145 · WEB
• access.redhat.com/security/cve/CVE-2024-11079 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• ansible/ansible · PACKAGE
• ansible/ansible

Lỗ hổng khác của ansible-core

• CVE-2026-11332CAO 7.8A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirement…
• CVE-2024-9902TRUNG BÌNH 6.3A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any…
• CVE-2024-8775TRUNG BÌNH 5.5A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a…
• CVE-2024-0690TRUNG BÌNH 5.5An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Inf…
• CVE-2023-5764CAO 7.8A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation fr…