Threats Tagged 'cve-2025-59530'

Red Hat Ansible Automation Platform 2. 6 for RHEL 9 includes a security update addressing two vulnerabilities: a crash in receptor's quic-go component (CVE-2025-59530) and an improper path validation in the automation-gateway that allows credential exfiltration (CVE-2025-9909). The latter vulnerability is rated as medium severity by Red Hat Product Security. The update includes multiple fixes and enhancements across the platform components. No known exploits in the wild have been reported. The advisory does not provide a CVSS score but confirms the availability of updated packages addressing these issues.

Red Hat Ansible Automation Platform 2. 5 for RHEL 8 and 9 contains multiple security vulnerabilities including Django SQL injection, sensitive internal headers disclosure, improper path validation allowing credential exfiltration, and denial of service issues. These vulnerabilities affect components such as automation-controller, automation-eda-controller, automation-gateway, and receptor. Red Hat has released an important security advisory (RHSA-2025:23069) addressing these issues with updated packages and fixes. The advisory covers six CVEs including CVE-2025-9907, which exposes sensitive headers in event stream test mode. The update also includes various bug fixes and enhancements across the platform. No known exploits in the wild have been reported. The vendor advisory confirms that updated packages are available to remediate these vulnerabilities.