https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:40:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01646 bdu:2025-01646 https://cve.radiocsirt.org/vuln/bdu:2025-01646 https://cve.radiocsirt.org/vuln/euvd-2026-261515 EUVD-2026-261515 https://cve.radiocsirt.org/vuln/euvd-2026-261515 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11483 <p>A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services.</p> <p>A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11483 https://cve.radiocsirt.org/vuln/ghsa-q73v-w388-wp95 <p>A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services.</p> <p>A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services.</p> https://cve.radiocsirt.org/vuln/ghsa-q73v-w388-wp95 https://cve.radiocsirt.org/vuln/rhsa-2024:11145 <p>ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core automation-gateway: aap-gateway: Improper Scope Handling in OAuth2 Tokens for AAP 2.5</p> <p>ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core automation-gateway: aap-gateway: Improper Scope Handling in OAuth2 Tokens for AAP 2.5</p> https://cve.radiocsirt.org/vuln/rhsa-2024:11145 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3705 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Ansible Automation Platform und Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Ansible Automation Platform und Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3705