Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 | automation-gateway | 0:2.5.20250305-1.el8ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 | automation-gateway-config | 0:2.5.20250305-1.el8ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 | automation-gateway-server | 0:2.5.20250305-1.el8ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 | automation-gateway | 0:2.5.20250305-1.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 | automation-gateway-config | 0:2.5.20250305-1.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 | automation-gateway-server | 0:2.5.20250305-1.el9ap |
Vulnerabilities 1
-
High 8.1
Aap-gateway: aap-gateway privilege escalation
A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2349081
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1954.json
-
report
https://access.redhat.com/security/cve/CVE-2025-1801
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-1801
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1801