Към съдържанието
Търсене

CVE-2025-9909: Red Hat Ansible Automation Platform 2.5 for RHEL 8

6.7

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с администраторски права и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.

Засегнати продукти

  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:3.1.1-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.2-1.1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:0.1.4-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:2.5.20251210-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:4.10.10-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:2.13.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:0.4.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:4.2.26-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:2.1.2-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:0.4.36-2.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:4.10.10-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:23.0.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:1.6.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:9.0.1-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:3.8.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:0.2.15-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:0.4.2-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:25.12.0-1.2.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: от 0:4.15.0-1.el8ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:3.1.1-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.2-1.1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:0.1.4-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:2.5.20251210-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:4.10.10-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:2.13.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:0.4.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:4.2.26-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:2.1.2-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:0.4.36-2.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:4.10.10-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:23.0.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:1.6.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:9.0.1-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:3.8.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:0.2.15-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:0.4.2-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:25.12.0-1.2.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: от 0:4.15.0-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9: от 0:2.6.20251119-1.el9ap нататък
  • Red Hat Red Hat Ansible Automation Platform 2.5: от sha256:93b5d66f1fa8a3241d999df47c8430c13fa11b751b5fc3d4a8fd2a39d282b3fd нататък
  • Red Hat Red Hat Ansible Automation Platform 2.6: от sha256:d6bd83a65b6a0ca9cead0652736c51dd1ab02fc8d9ee2a5c19e413a5239c0cb7 нататък

Вид слабост

История

  • 27 февруари 2026 Публикувано

Други уязвимости в Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8

Първоизточници

CVE-2025-9909: Red Hat Ansible Automation Platform 2.5 for RHEL 8 | freedomonline.bg