CVE-2025-7738
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap
A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users, the clear text exposure of sensitive credentials increases the risk of accidental leaks or misuse.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
django-ansible-base
- Vendor
- Ansible
- Product
- django-ansible-base
- Platforms
- Unknown
- Default status
unaffected- Package
- django-ansible-base
- Package collection
- https://github.com/ansible/django-ansible-base
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | 2025.7.22 | Unavailable | None listed |
Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Vendor
- Red Hat
- Product
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Platforms
- Unknown
- Default status
affected- Package
- python3.11-django-ansible-base
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:2.5.20250730-1.el8ap | unaffected | rpm | * | Unavailable | None listed |
Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Vendor
- Red Hat
- Product
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Platforms
- Unknown
- Default status
affected- Package
- python3.11-django-ansible-base
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0:2.5.20250730-1.el9ap | unaffected | rpm | * | Unavailable | None listed |