Platform: insecure websocket used when interacting with eda server

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of confidentiality and integrity of the system.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

敏感数据的明文传输

Red Hat Ansible Automation Platform 安全漏洞

Red Hat Ansible Automation是美国红帽（Red Hat）公司的一个应用软件。提供一个自动化基础架构的各个方面，从服务器和网络设备到操作系统，应用程序和安全性。 Red Hat Ansible Automation Platform存在安全漏洞，该漏洞源于与 EDA 服务器交互时使用不安全的 websocket。

N/A

N/A