[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2024-1657Date: (C)2024-04-25   (M)2024-04-26


A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of confidentiality and integrity of the system.

Reference:
RHBZ#2265085
RHSA-2024:1057
https://access.redhat.com/security/cve/CVE-2024-1657

XCCDF    1

© SecPod Technologies