PT-2024-1961 · Ansible · Ansible Automation Platform

Vipul Nair · Published 2024-02-20 · Updated 2026-02-25 · CVE-2024-1657

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform (affected versions not specified)

Description A flaw in the Ansible automation platform was found, related to an insecure WebSocket connection used during installation from the Ansible rulebook EDA server. This issue could allow an attacker with access to any machine in the CIDR block to download all rulebook data from the WebSocket, resulting in loss of confidentiality and integrity of the system. The vulnerability is also related to the lack of origin checking in WebSockets due to incorrect channel restriction, which could allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-319

CWE-923

CWE-200

CWE-1385

Related Identifiers

BDU:2024-01785

CVE-2024-1657

RHSA-2024:1057

Affected Products

Ansible Automation Platform

References · 7

• https://bdu.fstec.ru/vul/2024-01785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-1657 · Security Note
• https://access.redhat.com/errata/RHSA-2024:1057 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2265085 · Note
• https://vuldb.com/ru/?id.255317 · Note
• https://access.redhat.com/security/cve/CVE-2024-1657 · Note
• https://t.me/cveNotify/153240 · Telegram Post