cveboard RSS feed

CVE-2024-11483

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Automation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5

A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While the impact is limited to actions within the user’s assigned permissions, it undermines scoped access controls, potentially allowing unintended modifications in the application and consuming services.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

django-ansible-base

Vendor
Unknown
Product
Unknown
Platforms
Unknown
Default status
unaffected
Package
django-ansible-base
Package collection
https://github.com/ansible/django-ansible-base
django-ansible-base · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemverUnavailablev2024.10.17None listed

Red Hat Ansible Automation Platform 2.5 for RHEL 8

Vendor
Red Hat
Product
Red Hat Ansible Automation Platform 2.5 for RHEL 8
Platforms
Unknown
Default status
affected
Package
automation-gateway
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Ansible Automation Platform 2.5 for RHEL 8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:2.5.20241218-1.el8apunaffectedrpm*UnavailableNone listed

Red Hat Ansible Automation Platform 2.5 for RHEL 9

Vendor
Red Hat
Product
Red Hat Ansible Automation Platform 2.5 for RHEL 9
Platforms
Unknown
Default status
affected
Package
automation-gateway
Package collection
https://access.redhat.com/downloads/content/package-browser/
Red Hat Ansible Automation Platform 2.5 for RHEL 9 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0:2.5.20241218-1.el9apunaffectedrpm*UnavailableNone listed