Threats tagged 'ghsa-9hgq-3p3x-rvvw'

A vulnerability in the ansible-collection-redhat-leapp allows an attacker with privileged write access on a managed node to manipulate Leapp report content. This manipulation can cause the Ansible controller to read and copy its own local files to the managed node during a specific remediation task, leading to information disclosure of sensitive controller-side data such as private keys or credentials. The issue has a CVSS score of 6.2 (medium severity). Red Hat has released a security update addressing this flaw in Red Hat Enterprise Linux 9.8 and related variants.