Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-53862 EUVD-2025-21135GHSA-qm85-96h4-7f94

Aap: aap-gateway: automation-hub: sensitive information disclosure

Published Jul 11, 2025 · Updated Nov 21, 2025 · Assigned by redhat

Description

A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data that may contain important information.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Ansible Automation Platform 2 — —

References