Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Fixed packages 2

Vulnerabilities 1

• Medium 6.5
  CVE-2025-2877

  Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda

  A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a r…

  Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 Red Hat Ansible Automation Platform 2.5 for RHEL 8 Red Hat Ansible Automation Platform 2.4 for RHEL 9
  Mar 28, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2355540
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3637.json
• report
  https://access.redhat.com/security/cve/CVE-2025-2877
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-2877
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-2877
• article
  https://github.com/ansible/ansible-rulebook/pull/767