RHSA-2024:3781: automation-controller-venv-tower Red Hat

Published

Published 02-10-2024Last modified 17-10-2026

Vulnerability summary

RHSA-2024:3781 is a high (CVSS 8.1) vulnerability in automation-controller-venv-tower Red Hat.

Priority

Prioritisesevere

Severe, CVSS 8.1 (OSV · Red hat); no exploitation reported by the 5 checked sources; EPSS not yet published

Source freshness unavailable

How is this decided?

CVSS score

8.1/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 20 · Downstream 0 · Related 3

Timeline

02-10-2024
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

CVSS metrics

1 score · 1 source · 1 version

v3.18.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat64 products

automation-controller-venv-tower< 0:4.5.7-1.el8ap | < 0:4.5.7-1.el9ap
automation-hub< 0:4.9.2-1.el8ap | < 0:4.9.2-1.el9ap
python-aiohttp< 0:3.9.5-1.el9ap
python-aiohttp-debugsource< 0:3.9.5-1.el9ap
python-black< 0:22.8.0-2.el9ap

python-cryptography< 0:42.0.5-1.el9ap
python-cryptography-debugsource< 0:42.0.5-1.el9ap
python-galaxy-ng< 0:4.9.2-1.el9ap
python-gunicorn< 0:22.0.0-1.el9ap
python-idna< 0:3.7-1.el9ap
python-jinja2< 0:3.1.4-1.el9ap
python-pillow< 0:10.3.0-1.el9ap
python-pillow-debugsource< 0:10.3.0-1.el9ap
python-pydantic< 0:1.10.15-1.el9ap
python-requests< 0:2.32.2-1.el9ap
python-social-auth-app-django< 0:5.4.1-1.el9ap
python-sqlparse< 0:0.5.0-1.el9ap
python3-aiohttp< 0:3.9.5-1.el9ap
python3-aiohttp-debuginfo< 0:3.9.5-1.el9ap
python3-black< 0:22.8.0-2.el9ap
python3-cryptography< 0:42.0.5-1.el9ap
python3-cryptography-debuginfo< 0:42.0.5-1.el9ap
python3-galaxy-ng< 0:4.9.2-1.el9ap
python3-gunicorn< 0:22.0.0-1.el9ap
python3-idna< 0:3.7-1.el9ap
python3-jinja2< 0:3.1.4-1.el9ap
python3-pillow< 0:10.3.0-1.el9ap
python3-pillow-debuginfo< 0:10.3.0-1.el9ap
python3-pydantic< 0:1.10.15-1.el9ap
python3-requests< 0:2.32.2-1.el9ap
python3-social-auth-app-django< 0:5.4.1-1.el9ap
python3-sqlparse< 0:0.5.0-1.el9ap
python39-aiohttp< 0:3.9.5-1.el8ap
python39-aiohttp-debuginfo< 0:3.9.5-1.el8ap
python39-black< 0:22.8.0-2.el8ap
python39-cryptography< 0:42.0.5-1.el8ap
python39-cryptography-debuginfo< 0:42.0.5-1.el8ap
python39-galaxy-ng< 0:4.9.2-1.el8ap
python39-gunicorn< 0:22.0.0-1.el8ap
python39-idna< 0:3.7-1.el8ap
python39-jinja2< 0:3.1.4-1.el8ap
python39-pillow< 0:10.3.0-1.el8ap
python39-pillow-debuginfo< 0:10.3.0-1.el8ap
python39-pydantic< 0:1.10.15-1.el8ap
python39-requests< 0:2.32.2-1.el8ap
python39-social-auth-app-django< 0:5.4.1-1.el8ap
python39-sqlparse< 0:0.5.0-1.el8ap
python3x-aiohttp< 0:3.9.5-1.el8ap
python3x-aiohttp-debugsource< 0:3.9.5-1.el8ap
python3x-black< 0:22.8.0-2.el8ap
python3x-cryptography< 0:42.0.5-1.el8ap
python3x-cryptography-debugsource< 0:42.0.5-1.el8ap
python3x-galaxy-ng< 0:4.9.2-1.el8ap
python3x-gunicorn< 0:22.0.0-1.el8ap
python3x-idna< 0:3.7-1.el8ap
python3x-jinja2< 0:3.1.4-1.el8ap
python3x-pillow< 0:10.3.0-1.el8ap
python3x-pillow-debugsource< 0:10.3.0-1.el8ap
python3x-pydantic< 0:1.10.15-1.el8ap
python3x-requests< 0:2.32.2-1.el8ap
python3x-social-auth-app-django< 0:5.4.1-1.el8ap
python3x-sqlparse< 0:0.5.0-1.el8ap
receptor< 0:1.4.8-1.el8ap | < 0:1.4.8-1.el9ap
receptorctl< 0:1.4.8-1.el8ap | < 0:1.4.8-1.el9ap

Show all 64

1 vendor · 64 products

References

121 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2269617REPORT
bugzilla.redhat.com/show_bug.cgi?id=2270236REPORT
bugzilla.redhat.com/show_bug.cgi?id=2272563REPORT
bugzilla.redhat.com/show_bug.cgi?id=2274779REPORT
bugzilla.redhat.com/show_bug.cgi?id=2275106REPORT
bugzilla.redhat.com/show_bug.cgi?id=2275280REPORT
bugzilla.redhat.com/show_bug.cgi?id=2275989REPORT
bugzilla.redhat.com/show_bug.cgi?id=2277035REPORT
bugzilla.redhat.com/show_bug.cgi?id=2278038REPORT
bugzilla.redhat.com/show_bug.cgi?id=2278710REPORT
bugzilla.redhat.com/show_bug.cgi?id=2279476REPORT
bugzilla.redhat.com/show_bug.cgi?id=2282114REPORT
issues.redhat.com/browse/AAH-3111ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3781.jsonAdvisory
access.redhat.com/security/cve/CVE-2023-5752REPORT
www.cve.org/CVERecord?id=CVE-2023-5752Advisory
nvd.nist.gov/vuln/detail/CVE-2023-5752Advisory
github.com/pypa/pip/pull/12306ARTICLE
mail.python.org/archives/list/security-announce@python.org/thread/F4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL/ARTICLE
access.redhat.com/security/cve/CVE-2023-45288REPORT
www.cve.org/CVERecord?id=CVE-2023-45288Advisory
nvd.nist.gov/vuln/detail/CVE-2023-45288Advisory
nowotarski.info/http2-continuation-flood/ARTICLE
pkg.go.dev/vuln/GO-2024-2687Advisory
www.kb.cert.org/vuls/id/421644Advisory
access.redhat.com/security/cve/CVE-2023-45290REPORT
www.cve.org/CVERecord?id=CVE-2023-45290Advisory
nvd.nist.gov/vuln/detail/CVE-2023-45290Advisory
www.openwall.com/lists/oss-security/2024/03/08/4ARTICLE
go.dev/cl/569341ARTICLE
go.dev/issue/65383ARTICLE
groups.google.com/g/golang-announce/c/5pwGVUPoMbgARTICLE
pkg.go.dev/vuln/GO-2024-2599Advisory
security.netapp.com/advisory/ntap-20240329-0004ARTICLE
access.redhat.com/security/cve/CVE-2023-49083REPORT
www.cve.org/CVERecord?id=CVE-2023-49083Advisory
nvd.nist.gov/vuln/detail/CVE-2023-49083Advisory
github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48aARTICLE
github.com/pyca/cryptography/pull/9926ARTICLE
github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97ARTICLE
access.redhat.com/security/cve/CVE-2023-50447REPORT
www.cve.org/CVERecord?id=CVE-2023-50447Advisory
nvd.nist.gov/vuln/detail/CVE-2023-50447Advisory
www.openwall.com/lists/oss-security/2024/01/20/1ARTICLE
devhub.checkmarx.com/cve-details/CVE-2023-50447/ARTICLE
duartecsantos.github.io/2023-01-02-CVE-2023-50447/ARTICLE
github.com/python-pillow/Pillow/releasesARTICLE
access.redhat.com/security/cve/CVE-2024-1135REPORT
www.cve.org/CVERecord?id=CVE-2024-1135Advisory
nvd.nist.gov/vuln/detail/CVE-2024-1135Advisory
github.com/advisories/GHSA-w3h3-4rj7-4ph4Advisory
github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1dARTICLE
huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1ARTICLE
access.redhat.com/security/cve/CVE-2024-3651REPORT
www.cve.org/CVERecord?id=CVE-2024-3651Advisory
nvd.nist.gov/vuln/detail/CVE-2024-3651Advisory
access.redhat.com/security/cve/CVE-2024-3772REPORT
www.cve.org/CVERecord?id=CVE-2024-3772Advisory
nvd.nist.gov/vuln/detail/CVE-2024-3772Advisory
access.redhat.com/security/cve/CVE-2024-4340REPORT
www.cve.org/CVERecord?id=CVE-2024-4340Advisory
nvd.nist.gov/vuln/detail/CVE-2024-4340Advisory
github.com/advisories/GHSA-2m57-hf25-phggAdvisory
access.redhat.com/security/cve/CVE-2024-21503REPORT
www.cve.org/CVERecord?id=CVE-2024-21503Advisory
nvd.nist.gov/vuln/detail/CVE-2024-21503Advisory
github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8ARTICLE
github.com/psf/black/releases/tag/24.3.0ARTICLE
security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273ARTICLE
access.redhat.com/security/cve/CVE-2024-24783REPORT
www.cve.org/CVERecord?id=CVE-2024-24783Advisory
nvd.nist.gov/vuln/detail/CVE-2024-24783Advisory
github.com/advisories/GHSA-3q2c-pvp5-3cqpAdvisory
go.dev/cl/569339ARTICLE
go.dev/issue/65390ARTICLE
pkg.go.dev/vuln/GO-2024-2598Advisory
security.netapp.com/advisory/ntap-20240329-0005ARTICLE
access.redhat.com/security/cve/CVE-2024-26130REPORT
www.cve.org/CVERecord?id=CVE-2024-26130Advisory
nvd.nist.gov/vuln/detail/CVE-2024-26130Advisory
access.redhat.com/security/cve/CVE-2024-27306REPORT
www.cve.org/CVERecord?id=CVE-2024-27306Advisory
nvd.nist.gov/vuln/detail/CVE-2024-27306Advisory
access.redhat.com/security/cve/CVE-2024-27351REPORT
www.cve.org/CVERecord?id=CVE-2024-27351Advisory
nvd.nist.gov/vuln/detail/CVE-2024-27351Advisory
www.djangoproject.com/weblog/2024/mar/04/security-releases/ARTICLE
access.redhat.com/security/cve/CVE-2024-28219REPORT
www.cve.org/CVERecord?id=CVE-2024-28219Advisory
nvd.nist.gov/vuln/detail/CVE-2024-28219Advisory

Showing 100 of 121.