Description
A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of confidentiality and integrity of the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ansible | < 2.4 | 2.4 |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 8 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2.4 for RHEL 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ansible Automation Platform Inside 2 | python-jinja2 +1 | 3.1.3-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Inside 2 | python-pygments +1 | 2.17.2-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Inside 2 | python39-jinja2 +1 | 3.1.3-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Inside 2 | python39-pygments +1 | 2.17.2-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Developer 2 | python-jinja2 +1 | 3.1.3-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Developer 2 | python-pygments +1 | 2.17.2-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Developer 2 | python39-jinja2 +1 | 3.1.3-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform Developer 2 | python39-pygments +1 | 2.17.2-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-installer | 2.4-6.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | ansible-rulebook +3 | 1.0.5-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-aiohttp +1 | 3.9.1-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-django +1 | 4.2.10-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-jinja2 +1 | 3.1.3-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-pillow +1 | 10.0.1-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-pycryptodomex +1 | 3.20.0-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python-pygments +1 | 2.17.2-1.el9ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-aiohttp +1 | 3.9.1-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-django +1 | 4.2.10-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-jinja2 +1 | 3.1.3-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-pillow +1 | 10.0.1-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-pycryptodomex +1 | 3.20.0-1.el8ap | RHSA-2024:1057 |
| Red Hat Ansible Automation Platform 2 | python39-pygments +1 | 2.17.2-1.el8ap | RHSA-2024:1057 |
Advisories 2
- RHSA-2024:1057 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2024-0522 Red Hat Ansible Automation Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 24, 2025
References
- RHSA-2024:1057 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-1657 vdb-entry
- RHBZ#2265085 issue-tracking