Ansible: Schwachstelle ermöglicht Privilegieneskalation

Summary

Product

Vulnerabilities 1

• Medium 6.3
  CVE-2024-9902 Public exploit

  Ansible-core: ansible-core user may read/write unauthorized content

  A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` module against the unprivi…

  Red Hat Red Hat Enterprise Linux 10 Red Hat Ansible Automation Platform 2.5 for RHEL 9 Red Hat Ansible Automation Platform 2.5 for RHEL 8 Linux Debian Ubuntu Azure Linux PyPI
  Nov 6, 2024

Revision history

1. 2026-06-07 #8

   Neue Updates von openSUSE aufgenommen

2. 2025-11-23 #7

   Neue Updates von openSUSE aufgenommen

3. 2025-02-25 #6

   Neue Updates von Red Hat aufgenommen

4. 2024-12-03 #5

   Neue Updates von openSUSE und Red Hat aufgenommen

5. 2024-11-24 #4

   Neue Updates von Debian aufgenommen

6. 2024-11-18 #3

   Neue Updates von Red Hat aufgenommen

7. 2024-11-17 #2

   Neue Updates von openSUSE aufgenommen

8. 2024-11-06 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2024-11-06
  https://github.com/advisories/GHSA-32p4-gm2c-wmch
• NIST Vulnerability Database vom 2024-11-06
  https://nvd.nist.gov/vuln/detail/CVE-2024-9902
• Red Hat Bugzilla vom 2024-11-06
  https://bugzilla.redhat.com/show_bug.cgi?id=2318271
• Red Hat vom 2024-11-06
  https://access.redhat.com/errata/RHSA-2024:8969
• openSUSE Security Update OPENSUSE-SU-2024:14499-1 vom 2024-11-16
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XTBTIR7I4SBPWDHPDYOHZRKGP6BL5NCR/
• Red Hat Security Advisory RHSA-2024:9894 vom 2024-11-18
  https://access.redhat.com/errata/RHSA-2024:9894
• Debian Security Advisory DLA-3963 vom 2024-11-24
  https://lists.debian.org/debian-lts-announce/2024/11/msg00021.html
• openSUSE Security Update OPENSUSE-SU-2024:14537-1 vom 2024-12-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2Y6RFLPB54N7XR7AP7A2DEXGLBEDEQJU/
• Red Hat Security Advisory RHSA-2024:10762 vom 2024-12-03
  https://access.redhat.com/errata/RHSA-2024:10762
• Red Hat Security Advisory RHSA-2025:1861 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1861
• openSUSE Security Update OPENSUSE-SU-2025:15754-1 vom 2025-11-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QBAHQDLLO4EUEQG4IUN2D6GLV7TJAWB5/
• openSUSE Security Update OPENSUSE-SU-2026:10945-1 vom 2026-06-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UE5263L2QI6D2LMNCCIQN6SBZIVCICYV/