Record status Published
Identifier year (not publication year) 2023
Source publication Nov 14, 2023
Source updated Nov 20, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat Ansible Automation Platform 2.4 for RHEL 8
Vendor Red Hat
Product Red Hat Ansible Automation Platform 2.4 for RHEL 8
Platforms Unknown
Default status affected
Package python3x-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Ansible Automation Platform 2.4 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.18-1.el8ap unaffectedrpm * Unavailable None listed
Red Hat Ansible Automation Platform 2.4 for RHEL 9
Vendor Red Hat
Product Red Hat Ansible Automation Platform 2.4 for RHEL 9
Platforms Unknown
Default status affected
Package python-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Ansible Automation Platform 2.4 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.18-1.el9ap unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.14 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.14 for RHEL 8
Platforms Unknown
Default status affected
Package python-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.14 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.18-2.el8pc unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.14 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.14 for RHEL 8
Platforms Unknown
Default status affected
Package python-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.14 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.18-2.el8pc unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.15 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.15 for RHEL 8
Platforms Unknown
Default status affected
Package python-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.15 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.19-2.el8pc unaffectedrpm * Unavailable None listed
Red Hat Satellite 6.15 for RHEL 8
Vendor Red Hat
Product Red Hat Satellite 6.15 for RHEL 8
Platforms Unknown
Default status affected
Package python-galaxy-importer
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Satellite 6.15 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:0.4.19-2.el8pc unaffectedrpm * Unavailable None listed