{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/ansible/ansible","packageName":"ansible-core","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThanOrEqual":"2.17.4","status":"affected","version":"1.0.0","versionType":"semver"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform/ansible-builder-rhel8","product":"Ansible Automation Platform Execution Environments","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1.2.0-91","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform/ansible-builder-rhel9","product":"Ansible Automation Platform Execution Environments","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.0.1-95","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform/ee-29-rhel8","product":"Ansible Automation Platform Execution Environments","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2.9.27-32","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform/ee-minimal-rhel8","product":"Ansible Automation Platform Execution Environments","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2.12.10-54","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform/ee-minimal-rhel9","product":"Ansible Automation Platform Execution Environments","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2.15.12-17","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-server-rhel9","product":"Discovery 1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1.12.0-1","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-ui-rhel9","product":"Discovery 1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1.12.0-1","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.15.13-1.el8ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.15.13-1.el9ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.16.13-1.el8ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.16.13-1.el9ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhelai1/bootc-nvidia-rhel9","product":"Red Hat Enterprise Linux AI (RHEL AI)","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"PyPI","packageName":"ansible-core","product":"ansible-core","source":"OSV GHSA-jpxc-vmjf-9fcj","vendor":"","versions":[{"status":"affected","version":"2.17.0","versionType":"PyPI"},{"status":"affected","version":"2.17.0b1","versionType":"PyPI"},{"status":"affected","version":"2.17.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.0rc2","versionType":"PyPI"},{"status":"affected","version":"2.17.1","versionType":"PyPI"},{"status":"affected","version":"2.17.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.2","versionType":"PyPI"},{"status":"affected","version":"2.17.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.2rc2","versionType":"PyPI"},{"status":"affected","version":"2.17.3","versionType":"PyPI"},{"status":"affected","version":"2.17.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.4","versionType":"PyPI"},{"status":"affected","version":"2.17.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.5","versionType":"PyPI"},{"status":"affected","version":"2.17.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.17.6rc1","versionType":"PyPI"},{"events":[{"introduced":"2.17.0b1"},{"fixed":"2.17.6"}],"status":"unknown","version":"2.17.0b1","versionType":"ECOSYSTEM"}]},{"defaultStatus":"unaffected","ecosystem":"PyPI","packageName":"ansible-core","product":"ansible-core","source":"OSV GHSA-jpxc-vmjf-9fcj","vendor":"","versions":[{"status":"affected","version":"0.0.1a1","versionType":"PyPI"},{"status":"affected","version":"2.11.0","versionType":"PyPI"},{"status":"affected","version":"2.11.0b1","versionType":"PyPI"},{"status":"affected","version":"2.11.0b2","versionType":"PyPI"},{"status":"affected","version":"2.11.0b3","versionType":"PyPI"},{"status":"affected","version":"2.11.0b4","versionType":"PyPI"},{"status":"affected","version":"2.11.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.0rc2","versionType":"PyPI"},{"status":"affected","version":"2.11.1","versionType":"PyPI"},{"status":"affected","version":"2.11.10","versionType":"PyPI"},{"status":"affected","version":"2.11.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.11","versionType":"PyPI"},{"status":"affected","version":"2.11.11rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.12","versionType":"PyPI"},{"status":"affected","version":"2.11.12rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.2","versionType":"PyPI"},{"status":"affected","version":"2.11.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.3","versionType":"PyPI"},{"status":"affected","version":"2.11.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.4","versionType":"PyPI"},{"status":"affected","version":"2.11.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.5","versionType":"PyPI"},{"status":"affected","version":"2.11.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.6","versionType":"PyPI"},{"status":"affected","version":"2.11.6rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.7","versionType":"PyPI"},{"status":"affected","version":"2.11.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.8","versionType":"PyPI"},{"status":"affected","version":"2.11.8rc1","versionType":"PyPI"},{"status":"affected","version":"2.11.9","versionType":"PyPI"},{"status":"affected","version":"2.11.9rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.0","versionType":"PyPI"},{"status":"affected","version":"2.12.0b1","versionType":"PyPI"},{"status":"affected","version":"2.12.0b2","versionType":"PyPI"},{"status":"affected","version":"2.12.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.1","versionType":"PyPI"},{"status":"affected","version":"2.12.10","versionType":"PyPI"},{"status":"affected","version":"2.12.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.2","versionType":"PyPI"},{"status":"affected","version":"2.12.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.3","versionType":"PyPI"},{"status":"affected","version":"2.12.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.4","versionType":"PyPI"},{"status":"affected","version":"2.12.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.5","versionType":"PyPI"},{"status":"affected","version":"2.12.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.6","versionType":"PyPI"},{"status":"affected","version":"2.12.6rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.7","versionType":"PyPI"},{"status":"affected","version":"2.12.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.8","versionType":"PyPI"},{"status":"affected","version":"2.12.8rc1","versionType":"PyPI"},{"status":"affected","version":"2.12.9","versionType":"PyPI"},{"status":"affected","version":"2.12.9rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.0","versionType":"PyPI"},{"status":"affected","version":"2.13.0b0","versionType":"PyPI"},{"status":"affected","version":"2.13.0b1","versionType":"PyPI"},{"status":"affected","version":"2.13.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.1","versionType":"PyPI"},{"status":"affected","version":"2.13.10","versionType":"PyPI"},{"status":"affected","version":"2.13.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.11","versionType":"PyPI"},{"status":"affected","version":"2.13.11rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.12","versionType":"PyPI"},{"status":"affected","version":"2.13.12rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.13","versionType":"PyPI"},{"status":"affected","version":"2.13.13rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.2","versionType":"PyPI"},{"status":"affected","version":"2.13.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.3","versionType":"PyPI"},{"status":"affected","version":"2.13.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.4","versionType":"PyPI"},{"status":"affected","version":"2.13.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.5","versionType":"PyPI"},{"status":"affected","version":"2.13.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.6","versionType":"PyPI"},{"status":"affected","version":"2.13.6rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.7","versionType":"PyPI"},{"status":"affected","version":"2.13.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.8","versionType":"PyPI"},{"status":"affected","version":"2.13.8rc1","versionType":"PyPI"},{"status":"affected","version":"2.13.9","versionType":"PyPI"},{"status":"affected","version":"2.13.9rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.0","versionType":"PyPI"},{"status":"affected","version":"2.14.0b1","versionType":"PyPI"},{"status":"affected","version":"2.14.0b2","versionType":"PyPI"},{"status":"affected","version":"2.14.0b3","versionType":"PyPI"},{"status":"affected","version":"2.14.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.0rc1.post0","versionType":"PyPI"},{"status":"affected","version":"2.14.0rc2","versionType":"PyPI"},{"status":"affected","version":"2.14.1","versionType":"PyPI"},{"status":"affected","version":"2.14.10","versionType":"PyPI"},{"status":"affected","version":"2.14.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.11","versionType":"PyPI"},{"status":"affected","version":"2.14.11rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.12","versionType":"PyPI"},{"status":"affected","version":"2.14.12rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.13","versionType":"PyPI"},{"status":"affected","version":"2.14.14","versionType":"PyPI"},{"status":"affected","version":"2.14.14rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.15","versionType":"PyPI"},{"status":"affected","version":"2.14.15rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.16","versionType":"PyPI"},{"status":"affected","version":"2.14.16rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.17","versionType":"PyPI"},{"status":"affected","version":"2.14.17rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.18","versionType":"PyPI"},{"status":"affected","version":"2.14.18rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.2","versionType":"PyPI"},{"status":"affected","version":"2.14.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.3","versionType":"PyPI"},{"status":"affected","version":"2.14.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.4","versionType":"PyPI"},{"status":"affected","version":"2.14.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.5","versionType":"PyPI"},{"status":"affected","version":"2.14.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.6","versionType":"PyPI"},{"status":"affected","version":"2.14.6rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.7","versionType":"PyPI"},{"status":"affected","version":"2.14.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.8","versionType":"PyPI"},{"status":"affected","version":"2.14.8rc1","versionType":"PyPI"},{"status":"affected","version":"2.14.9","versionType":"PyPI"},{"status":"affected","version":"2.14.9rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.0","versionType":"PyPI"},{"status":"affected","version":"2.15.0b1","versionType":"PyPI"},{"status":"affected","version":"2.15.0b2","versionType":"PyPI"},{"status":"affected","version":"2.15.0b3","versionType":"PyPI"},{"status":"affected","version":"2.15.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.0rc2","versionType":"PyPI"},{"status":"affected","version":"2.15.1","versionType":"PyPI"},{"status":"affected","version":"2.15.10","versionType":"PyPI"},{"status":"affected","version":"2.15.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.11","versionType":"PyPI"},{"status":"affected","version":"2.15.11rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.12","versionType":"PyPI"},{"status":"affected","version":"2.15.12rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.13","versionType":"PyPI"},{"status":"affected","version":"2.15.13rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.2","versionType":"PyPI"},{"status":"affected","version":"2.15.2rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.3","versionType":"PyPI"},{"status":"affected","version":"2.15.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.4","versionType":"PyPI"},{"status":"affected","version":"2.15.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.5","versionType":"PyPI"},{"status":"affected","version":"2.15.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.6","versionType":"PyPI"},{"status":"affected","version":"2.15.6rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.7","versionType":"PyPI"},{"status":"affected","version":"2.15.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.15.8","versionType":"PyPI"},{"status":"affected","version":"2.15.9","versionType":"PyPI"},{"status":"affected","version":"2.15.9rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.0","versionType":"PyPI"},{"status":"affected","version":"2.16.0b1","versionType":"PyPI"},{"status":"affected","version":"2.16.0b2","versionType":"PyPI"},{"status":"affected","version":"2.16.0rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.1","versionType":"PyPI"},{"status":"affected","version":"2.16.10","versionType":"PyPI"},{"status":"affected","version":"2.16.10rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.11","versionType":"PyPI"},{"status":"affected","version":"2.16.11rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.12","versionType":"PyPI"},{"status":"affected","version":"2.16.12rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.13rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.1rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.2","versionType":"PyPI"},{"status":"affected","version":"2.16.3","versionType":"PyPI"},{"status":"affected","version":"2.16.3rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.4","versionType":"PyPI"},{"status":"affected","version":"2.16.4rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.5","versionType":"PyPI"},{"status":"affected","version":"2.16.5rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.6","versionType":"PyPI"},{"status":"affected","version":"2.16.7","versionType":"PyPI"},{"status":"affected","version":"2.16.7rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.8","versionType":"PyPI"},{"status":"affected","version":"2.16.8rc1","versionType":"PyPI"},{"status":"affected","version":"2.16.9","versionType":"PyPI"},{"status":"affected","version":"2.16.9rc1","versionType":"PyPI"},{"events":[{"introduced":"0"},{"fixed":"2.16.13"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-8775","cwes":["CWE-532"],"description":"A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as include_vars to load vaulted variables without setting the no_log: true parameter, resulting in sensitive data being printed in the playbook output or logs. This can lead to the unintentional disclosure of secrets like passwords or API keys, compromising security and potentially allowing unauthorized access or actions.","epss":{"date":"2026-11-05","percentile":0.19441,"score":0.00271},"exploits":[],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793889886405,"publishedAt":1726280114907,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:10762"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:8969"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:9894"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:1249"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2024-8775"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312119"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/advisories/GHSA-jpxc-vmjf-9fcj"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00021.html"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-jpxc-vmjf-9fcj"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-jpxc-vmjf-9fcj"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"kind":"fix","source":"OSV GHSA-jpxc-vmjf-9fcj","text":"ansible-core (PyPI): OSV reports a fixed version 2.17.6. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-jpxc-vmjf-9fcj"},{"kind":"fix","source":"OSV GHSA-jpxc-vmjf-9fcj","text":"ansible-core (PyPI): OSV reports a fixed version 2.16.13. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-jpxc-vmjf-9fcj"}],"revision":"f7bb528b297c7c708f7c3458bf9f4c3f421cdf52b98efa7293084321f72565d9","sources":[{"modifiedAt":1793889886405,"name":"CNA: redhat","retrievedAt":1793891323097,"url":"https://www.cve.org/CVERecord?id=CVE-2024-8775"},{"modifiedAt":1783446988974,"name":"OSV / GitHub Security Advisories","retrievedAt":1793891324332,"url":"https://osv.dev/vulnerability/GHSA-jpxc-vmjf-9fcj"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793891332798,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-8775"}],"ssvc":{"assessedAt":1726496483423,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Ansible-core: exposure of sensitive information in ansible vault files due to improper logging","updatedAt":1793891332798}