CVE-2023-4380
Fixed in a distro release EPSS <1%CVSS 6.3
A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.
Products: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ansible automation platform 2.4 | automation-eda-controller | 0:1.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller | 0:1.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-server | 0:1.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-server | 0:1.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-ui | 0:1.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-ui | 0:1.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform 2.4 | python-cryptography-debugsource | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform 2.4 | python-django | 0:3.2.20-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform 2.4 | python3-cryptography-debuginfo | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform 2.4 | python3-django | 0:3.2.20-1.el9ap |
| Red Hat ansible automation platform 2.4 | python39-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform 2.4 | python39-cryptography-debuginfo | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform 2.4 | python39-django | 0:3.2.20-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-requests | 0:2.31.0-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-cryptography-debugsource | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-django | 0:3.2.20-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-requests | 0:2.31.0-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | python-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform developer 2.4 | python-cryptography-debugsource | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform developer 2.4 | python3-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform developer 2.4 | python3-cryptography-debuginfo | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform developer 2.4 | python39-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform developer 2.4 | python39-cryptography-debuginfo | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform developer 2.4 | python3x-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform developer 2.4 | python3x-cryptography-debugsource | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform inside 2.4 | python-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform inside 2.4 | python-cryptography-debugsource | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform inside 2.4 | python3-cryptography | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform inside 2.4 | python3-cryptography-debuginfo | 0:38.0.4-2.el9ap |
| Red Hat ansible automation platform inside 2.4 | python39-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform inside 2.4 | python39-cryptography-debuginfo | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform inside 2.4 | python3x-cryptography | 0:38.0.4-2.el8ap |
| Red Hat ansible automation platform inside 2.4 | python3x-cryptography-debugsource | 0:38.0.4-2.el8ap |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 14.04 LTS | ansible | no fix |
| Ubuntu Pro 16.04 LTS | ansible | no fix |
| Ubuntu Pro 18.04 LTS | ansible | no fix |
| Ubuntu Pro 20.04 LTS | ansible | no fix |
| Ubuntu Pro 22.04 LTS | ansible | no fix |