DeutschShown in its original language — a full translation is planned for a future version.
Ansible-Core: Schwachstelle ermöglicht Codeausführung
view advisory published 2024-11-11
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Ansible, Red Hat Ansible Automation Platform und Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen oder um Sicherheitsmaßnahmen zu umgehen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11079US | — | — | ||
A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. Thi… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:10770 vom 2024-12-03external
- Red Hat Bugzilla 2325171 vom 2024-11-11external
- Debian Security Advisory DLA-4502 vom 2026-03-18external
- openSUSE Security Update OPENSUSE-SU-2024:14547-1 vom 2024-12-06external
- openSUSE Security Update OPENSUSE-SU-2024:14547-1 vom 2024-12-06external
- openSUSE Security Update OPENSUSE-SU-2025:15754-1 vom 2025-11-22external
- openSUSE Security Update OPENSUSE-SU-2026:10945-1 vom 2026-06-07external
- WID-SEC-W-2024-3404 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan