Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen und einen Denial-of-Service-Zustand herbeizuführen.
[UPDATE] [hoch] Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-09 11:15 UTC
- Importiert: 2026-10-12 09:53 UTC
- CVSS: 9.6
- Quelle-ID:
cert_bund - uid_hash:
58e03f8a7dcc842682ed9df9b586f92ea187442dee82f78bc19e8b5c2e418e6c
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.6 |
MEDIUM |
6.4 |
2026-04-08 |
|||
CRITICAL |
9.6 |
CRITICAL |
9.6 |
2026-08-18 |
|||
CRITICAL |
9.6 |
HIGH |
8.2 |
2026-08-20 |
|||
CRITICAL |
9.6 |
CRITICAL |
9.4 |
2026-07-01 |
|||
CRITICAL |
9.6 |
HIGH |
8.4 |
2026-07-01 |
|||
CRITICAL |
9.6 |
HIGH |
8.7 |
2026-08-17 |
|||
CRITICAL |
9.6 |
HIGH |
7.5 |
2026-08-17 |
|||
CRITICAL |
9.6 |
MEDIUM |
5 |
2026-09-23 |
|||
CRITICAL |
9.6 |
MEDIUM |
5 |
2026-09-23 |
|||
CRITICAL |
9.6 |
MEDIUM |
4.3 |
2026-09-23 |
|||
CRITICAL |
9.6 |
MEDIUM |
4.3 |
2026-09-23 |
|||
CRITICAL |
9.6 |
MEDIUM |
4.1 |
2026-09-23 |
|||
CRITICAL |
9.6 |
LOW |
2.7 |
2026-09-23 |
|||
CRITICAL |
9.6 |
LOW |
3.1 |
2026-09-23 |
|||
CRITICAL |
9.6 |
LOW |
3.1 |
2026-09-23 |
|||
CRITICAL |
9.6 |
HIGH |
8.7 |
2026-08-17 |
|||
CRITICAL |
9.6 |
CRITICAL |
9.1 |
2026-09-23 |
|||
CRITICAL |
9.6 |
HIGH |
7.7 |
2026-08-19 |
|||
CRITICAL |
9.6 |
HIGH |
8.1 |
2026-08-19 |
|||
CRITICAL |
9.6 |
HIGH |
8.8 |
2026-08-19 |
|||
CRITICAL |
9.6 |
HIGH |
8.8 |
2026-08-19 |
|||
CRITICAL |
9.6 |
HIGH |
8.4 |
2026-08-19 |
|||
CRITICAL |
9.6 |
HIGH |
8.5 |
2026-09-23 |
|||
CRITICAL |
9.6 |
HIGH |
7.1 |
2026-08-25 |
|||
CRITICAL |
9.6 |
HIGH |
7.5 |
2026-09-02 |
|||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
||||||
CRITICAL |
9.6 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |