PT-2023-9369 · Ansible+1 · Ansible Automation Platform+1

Vipul Nair · Published 2023-08-16 · Updated 2023-12-01 · CVE-2023-4237

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform (affected versions not specified)

Description The issue is related to a flaw in the ec2 key module of the Ansible Automation Platform, which is connected to shortcomings in the authorization procedure. This flaw allows an attacker to obtain access to confidential data, compromise their integrity, and cause a denial of service. Specifically, when creating a new keypair, the ec2 key module prints out the private key directly to the standard output, enabling an attacker to fetch those keys from the log files and compromise the system's confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2024-06928

CVE-2023-4237

GHSA-WW3M-FFRM-QVQV

Affected Products

Ansible Automation Platform

Astra Linux

References · 21

• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2024-0905SE18MD · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2023:5666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4237 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4237 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06928 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2229979 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4237 · Security Note
• https://access.redhat.com/security/cve/CVE-2023-4237 · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2023:5653 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4237 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ww3m-ffrm-qvqv · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4237 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4237 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4237 · Vendor Advisory
• https://github.com/ansible/ansible · Note