RHSA-2024:10770MediumCVSS 5.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update

Published
December 3, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2024-11079 →

📋 Description

CVE-2024-11079 — ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core

🎯 Affected products46

  • Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:06bccba7cd23ceff5c03ea32d80099cd2a3ce68b9c03435936cb4d6cfff4974c_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:68a5232ec36bcd98049ca3d42fedf1a3c15667f260712c6e3e5b90c1877ebbce_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:6b077737281691a1bfc90d1ae33fc30ce09a7c34240c1816aa2e678c0c0a91fa_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:a1988ba5bf65e42ac732e71b154323bf8df5fd25ce5a50b9dbaa1be370af62bb_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:d57bb670a115de96285e065ba0a4f2b67f752e8eec57e9b2f6371fbe3478972c_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:006df4661ba4abe1c9166a696d5aed80ad2958b4fc0b675f13228c801585fe8d_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:017b6d52de4f1a8e7574b86d5fda0671ed2b784be3cf6fc683348df1167d2af3_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:1a8167f204602e8d31c4ff9a813a07840c72843dd7afa91dd52d511064550065_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:99e6443f9aacceff0df4131349e3fe89ece17a5ed1507bc1c74b9692d2853624_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-29-rhel8@sha256:03a835f116a9636bb4a03884b8686f6aa82a03374aa431ca02350dcbf40f5898_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0a650301785be46f119a2080e7a09fefef893f611804a01b1304a28d98780fe0_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0b6a08e245cc02b03f5ae0b6fb74ac8f9738c437b4de3fa9a2b3225a2e914fda_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0d26e5c3dfdddecd1fef6ed915b59e7f1269c199563d46c1f3dead813ec42499_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:2946109032d00b8756175affc50fed01cc0bbcbc927a3fd2d5d846f825429b72_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:39169c112d66b9e7e9438c5246d1b25b8cf894aafc2880923472ad5c24b5d546_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3d39702e054b2fb712ace5cbc53d8b1619810240971e8046f5d0954e67c32880_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:44aae8b7c5fc7d0774962084a2943f567fbfdb740e31d1808be3da05a0c4049e_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:4b746a01c9dbd0c5ad07f085aa8236bbc93d21e7f1f5b9c395b8988b7703a01a_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:50cf5bbb57c9dfa77b385132948ea68cb20212df7476c94cc7087324ecf77254_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:5b411c45dec6c058ce918ebd9c37e1b9e6fbc9d3ec619b67cbfdf9c70d7033e5_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:5e98ecd8212d3ec46e2ae13e51e6c7f181718b0332a54351a229bcea4ddc63fe_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:6afae7906f7baccb28359493e832265d3f24f67fd4144246ddaf6e704512a8c2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9313194b84341535a96f02257389a759c8c31f2f3922f44c5c373380901d9432_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9a792b2313c66057a1955809a845ff7fd6cbf5b8530d1b16e66c19843bf09fa3_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:b53ca6d71a7c8cc6ab889cc834d4cb5b3550545ef90c2a35b182eda11e4fab47_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:bf21c17ba56785bd920f3e4ec869a790d12ca9876b70dcb2be6a3f5cbfda2966_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:db222c5e5b1e8783a14fe65d7cc11bb6222da908a41b193cc6949fec7e0ec6c0_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:db244d6b4f06ae97b9b15fe3071b7aab85daef71e5e92dc9d6459ce9903a37d2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:e45a1b593ec7ae0808cc3d249696b5a5e16382dcd4294a6d969000c49848f34c_ppc64le as a component of Ansible Automation Platform Execution Environments
  • +16 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Execution Environments Workaround: To mitigate this vulnerability, avoid using the hostvars object to reference content marked as !unsafe. Ensure that all remote data from modules or lookups is properly sanitized and validated before use in playbooks. Additionally, restrict access to inventory files and Ansible playbooks to trusted users to minimize exploitation risks.

🔗 References (4)