Description
A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of confidentiality and integrity of the system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ansible
Default version status: unaffected
0 to < 2.4affected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8
Default version status: affected
0:2.4-6.el8ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8
Default version status: affected
0:1.0.5-1.el8ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8
Default version status: affected
0:1.0.5-1.el8ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9
Default version status: affected
0:2.4-6.el9ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9
Default version status: affected
0:1.0.5-1.el9ap to < *unaffected
Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9
Default version status: affected
0:1.0.5-1.el9ap to < *unaffected