Threats affecting pkg:rpm/redhat/ansible-core

Red Hat Ansible Automation Platform 2.5 has security vulnerabilities including exposure of sensitive information in Ansible Vault files due to improper logging (CVE-2024-8775) and unauthorized read/write access by the ansible-core user (CVE-2024-9902). These issues have been addressed in updates to ansible-core and related components. The update to ansible-core version 2.16.13 and other platform components resolves these vulnerabilities.

A security update for ansible-core addresses a moderate severity information leak vulnerability (CVE-2024-0690) in tasks that ignore the ANSIBLE_NO_LOG configuration. This could lead to unintended exposure of sensitive information during task execution. The vulnerability affects Red Hat Enterprise Linux 8 and related distributions. The issue is fixed in ansible-core version 2.16.3, which includes this security fix along with other bug fixes and enhancements.