Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.1
Red Hat Ansible Automation Platform 2.4 Has Security Flaw
published 2 years ago
Summary
This update fixes multiple security vulnerabilities and bugs in Red Hat Ansible Automation Platform 2.4, which could allow an attacker to gain unauthorized access to sensitive data. Affected users should update their systems to the latest version to ensure they have the latest security patches. This update also includes bug fixes that improve the stability and performance of the platform.
What to do
- Update redhat automation-controller-venv-tower to version 0:4.5.12-1.el8ap.
- Update redhat automation-controller-venv-tower to version 0:4.5.12-1.el9ap.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:ansible_automation_platform_developer:2.4::el8 | redhat | automation-controller-venv-tower |
< 0:4.5.12-1.el8ap Fix: upgrade to 0:4.5.12-1.el8ap
|
| Red Hat:ansible_automation_platform:2.4::el8 | redhat | automation-controller-venv-tower |
< 0:4.5.12-1.el8ap Fix: upgrade to 0:4.5.12-1.el8ap
|
| Red Hat:ansible_automation_platform_developer:2.4::el9 | redhat | automation-controller-venv-tower |
< 0:4.5.12-1.el9ap Fix: upgrade to 0:4.5.12-1.el9ap
|
| Red Hat:ansible_automation_platform:2.4::el9 | redhat | automation-controller-venv-tower |
< 0:4.5.12-1.el9ap Fix: upgrade to 0:4.5.12-1.el9ap
|
Original advisory text
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
References
- https://access.redhat.com/errata/RHSA-2024:7312 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2292788 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294457 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2300497 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7312.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-21520 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-21520 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-21520 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-37891 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-37891 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-37891 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-41810 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-41810 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-41810 Vendor Advisory
- https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df... Third Party Advisory
- https://github.com/twisted/twisted/security/advisories/GHSA-cf56-g6w6-pqq2 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Oct 2024
Updated6 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2024:7312 · OSV
Track software like this
Free during beta