CVE-2024-9902
Fixed in a distro release EPSS <1%CVSS 6.3
A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` module against the unprivileged user's home directory. If the unprivileged user has traversal permissions on the directory containing the exploited target file, they retain full control over the contents of the file as its owner.
Products: Red Hat Ansible Automation Platform Execution Environments, Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat Enterprise Linux 10
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible-core | 2.14.18rc1 |
| PyPI | ansible-core | 2.15.13rc1 |
| PyPI | ansible-core | 2.16.13rc1 |
| PyPI | ansible-core | 2.17.6rc1 |
| PyPI | ansible-core | 2.18.0rc2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | ansible-operator | 1.37.0-r0 |
| Chainguard | ansible-operator-compat | 1.37.0-r0 |
| Debian 11 | ansible | 2.10.7+merged+base+2.10.17+dfsg-0+deb11u2 |
| Debian 12 | ansible | 5.4.0-1 |
| Debian 12 | ansible-core | 2.14.18-0+deb12u1 |
| Debian 13 | ansible | 5.4.0-1 |
| Debian 13 | ansible-core | 2.18.0-1 |
| Debian 14 | ansible | 5.4.0-1 |
| Debian 14 | ansible-core | 2.18.0-1 |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.13-1.el8ap |
| Red Hat ansible automation platform 2.4 | ansible-core | 1:2.15.13-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-controller-venv-tower | 0:4.5.13-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-controller-venv-tower | 0:4.5.13-1.el8ap |
| Red Hat ansible automation platform 2.5 | ansible-core | 1:2.16.13-1.el9ap |
| Red Hat ansible automation platform 2.5 | ansible-core | 1:2.16.13-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.13-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | ansible-core | 1:2.15.13-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | ansible-core | 1:2.16.13-1.el9ap |
| Red Hat ansible automation platform developer 2.5 | ansible-core | 1:2.16.13-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.13-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | ansible-core | 1:2.15.13-1.el8ap |
| Red Hat ansible automation platform inside 2.5 | ansible-core | 1:2.16.13-1.el9ap |
| Red Hat ansible automation platform inside 2.5 | ansible-core | 1:2.16.13-1.el8ap |
| Red Hat openstack 17.1 | openstack-ansible-core | 0:2.14.2-4.6.el9ost |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 14.04 LTS | ansible | no fix |
| Ubuntu Pro 16.04 LTS | ansible | no fix |
| Ubuntu Pro 18.04 LTS | ansible | no fix |
| Ubuntu Pro 20.04 LTS | ansible | no fix |
| Ubuntu Pro 22.04 LTS | ansible | no fix |
| Wolfi | ansible-operator | 1.37.0-r0 |
| Wolfi | ansible-operator-compat | 1.37.0-r0 |
| openSUSE Tumbleweed | ansible-core | 2.17.6-1.1 |
| openSUSE Tumbleweed | ansible-core-2.16 | 2.16.13-1.1 |
| openSUSE Tumbleweed | ansible-core-2.17 | 2.17.6-1.1 |
| openSUSE Tumbleweed | ansible-core-2.18 | 2.18.10-2.1 |
| openSUSE Tumbleweed | ansible-core-2.19 | 2.19.4-1.1 |
| openSUSE Tumbleweed | ansible-core-2.20 | 2.20.6-1.1 |