Vulnerabilities > Redhat > Ansible Automation Platform > 2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-05	CVE-2023-50782	Information Exposure Through Discrepancy vulnerability in multiple products A flaw was found in the python-cryptography package. network low complexity redhat cryptography-io couchbase CWE-203	7.5
2023-11-14	CVE-2023-5189	Relative Path Traversal vulnerability in Redhat Ansible Automation Platform and Satellite A path traversal vulnerability exists in Ansible when extracting tarballs. network low complexity redhat CWE-23	6.5
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-10-04	CVE-2023-4237	Unspecified vulnerability in Redhat Ansible Automation Platform and Ansible Collection A flaw was found in the Ansible Automation Platform. local low complexity redhat	7.8
2022-10-25	CVE-2022-3644	Insufficiently Protected Credentials vulnerability in multiple products The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only. local low complexity pulpproject redhat CWE-522	5.5
2022-09-13	CVE-2022-3205	Cross-site Scripting vulnerability in Redhat Ansible Automation Platform 1.2/2.0 Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS injection network low complexity redhat CWE-79	6.1
2022-09-01	CVE-2022-1632	An Improper Certificate Validation attack was found in Openshift. network low complexity redhat fedoraproject	6.5
2022-08-25	CVE-2021-4112	Unspecified vulnerability in Redhat products A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. local low complexity redhat	8.8
2022-08-18	CVE-2022-2568	Improper Privilege Management vulnerability in Redhat Ansible Automation Platform 2.0/2.1/2.2 A privilege escalation flaw was found in the Ansible Automation Platform. network low complexity redhat CWE-269	6.5