Incorrect authorization in Ansible - CVE-2024-9902

Vulnerability identifier: #VU100998

CSH Severity: Low

CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-9902

CWE-ID: CWE-863

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an error within the ansible-core `user` module. A local user can silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the `user` module against the unprivileged user's home directory. If the unprivileged user has traversal permissions on the directory containing the exploited target file, they retain full control over the contents of the file as its owner.

Ansible
IBM Cloud Pak for Security
IBM Fusion HCI
Ansible Automation Platform
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
QRadar Suite
IBM Security SOAR
Guardium Data Security Center (GDSC)
IBM Cloud Pak for Watson AIOps
Maximo Application Suite - IoT Component
Siebel CRM Cloud Applications
openEuler
Oracle Solaris
receptor (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
automation-gateway (Red Hat package)
ansible-help
ansible
ansible-test
ansible-doc
ansible-core (Red Hat package)
automation-controller (Red Hat package)
molecule (Red Hat package)
Migration Toolkit for Containers

Install updates from vendor's website.

Ansible - addressed in versions 2.14.18, 2.15.13, 2.16.13, 2.17.6
IBM Cloud Pak for Security - update to 1.11.3.0
QRadar Suite - update to 1.11.3.0
IBM Fusion HCI - update to 2.10.0
Guardium Data Security Center (GDSC) - update to 3.8.5
IBM Security SOAR - update to 51.0.10.0
receptor (Red Hat package) - addressed in versions 1.5.1-1.el8ap, 1.5.1-1.el9ap
Migration Toolkit for Containers - update to 1.8.5
Ansible Automation Platform - addressed in versions 2.4, 2.5
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-8.el8ap, 2.4-8.el9ap, 2.5-5.el8ap, 2.5-5.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.3-2.el8ap, 2.5.3-2.el9ap
ansible-help - update to 2.9.27-5
ansible - addressed in versions 2.9.27-5, 2.9.27-6
ansible-test - update to 2.9.27-6
ansible-doc - update to 2.9.27-6
ansible-core (Red Hat package) - addressed in versions 2.15.13-1.el8ap, 2.15.13-1.el9ap, 2.16.13-1.el8ap, 2.16.13-1.el9ap
automation-controller (Red Hat package) - addressed in versions 4.5.13-1.el8ap, 4.5.13-1.el9ap
IBM Cloud Pak for Watson AIOps - update to 4.8.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.9
Maximo Application Suite - IoT Component - addressed in versions 8.7.21, 8.8.17, 9.0.7
Oracle Solaris - update to 11.4 SRU 77
molecule (Red Hat package) - addressed in versions 24.9.0-2.el8ap, 24.9.0-2.el9ap

• https://bugzilla.redhat.com/show_bug.cgi?id=2318271

• Multiple vulnerabilities in Ansible
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• openEuler 22.03 LTS SP4 update for ansible
• openEuler 24.03 LTS update for ansible
• openEuler 22.03 LTS SP1 update for ansible
• openEuler 22.03 LTS SP3 update for ansible
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Oracle Solaris update for third-party components
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM Maximo Application Suite - IoT Component
• Multiple vulnerabilities in Siebel CRM Cloud Applications
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in IBM Fusion
• Multiple vulnerabilities in IBM Cloud Pak for Security and IBM QRadar Suite Software
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Security SOAR