CVE-2025-9907 : Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2025-9907 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda

来源: 美国国家漏洞数据库 NVD

Vulnerability Description

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the test_headers field when an event stream is in test mode. The possible outcome includes leakage of internal infrastructure details, accidental disclosure of user or system credentials, privilege escalation if high-value tokens are exposed, and persistent sensitive data exposure to all users with read access on the event stream.

来源: 美国国家漏洞数据库 NVD

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

来源: 美国国家漏洞数据库 NVD

Vulnerability Type

信息暴露

来源: 美国国家漏洞数据库 NVD

Vulnerability Title

Red Hat Ansible Automation Platform 安全漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

Red Hat Ansible Automation Platform（Red Hat AAP）是美国红帽（Red Hat）公司的一款实现战略性自动化的统一解决方案。 Red Hat Ansible Automation Platform（Red Hat AAP）存在安全漏洞，该漏洞源于可通过Event Stream Test Mode Headers绕过访问限制，可能导致读取敏感信息。

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:3.1.1-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.2-1.1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:0.1.4-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:1.1.14-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:4.10.10-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:2.13.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:0.4.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:4.2.26-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:2.1.2-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:0.4.36-2.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:4.10.10-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:23.0.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:1.6.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:9.0.1-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:3.8.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:0.2.15-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:0.4.2-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:25.12.0-1.2.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	0:4.15.0-1.el8ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:3.1.1-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.2-1.1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:0.1.4-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:1.1.14-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:4.10.10-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:2.13.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:0.4.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:4.2.26-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:2.1.2-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:0.4.36-2.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:4.10.10-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:23.0.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:1.6.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:9.0.1-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:3.8.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:0.2.15-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:0.4.2-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:25.12.0-1.2.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	0:4.15.0-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9`
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	0:1.2.1-1.el9ap ~ *	`cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9`
Red Hat	Red Hat Ansible Automation Platform 2.5	sha256:07673470fb62db8bec12ec20b2500228c0c6d5108916dd936d91e10610b783d1 ~ *	`cpe:/a:redhat:ansible_automation_platform:2.5::el8`
Red Hat	Red Hat Ansible Automation Platform 2.6	sha256:142125ce7f176ce4d9755f3124714bbfd8e10a687378988761d5451bd135ca76 ~ *	`cpe:/a:redhat:ansible_automation_platform:2.6::el9`

二、漏洞 CVE-2025-9907 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-9907 的情报信息

Please 登录 to view more intelligence information

https://bugzilla.redhat.com/show_bug.cgi?id=2392834issue-trackingx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23131vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19221vendor-advisoryx_refsource_REDHAT
https://nvd.nist.gov/vuln/detail/CVE-2025-9907

四、漏洞 CVE-2025-9907 的评论

暂无评论

支持本站 — 捐款将帮助我们持续运营

一、漏洞 CVE-2025-9907 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2025-9907 的公开POC

三、漏洞 CVE-2025-9907 的情报信息

四、漏洞 CVE-2025-9907 的评论

发表评论

支持本站 — 捐款将帮助我们持续运营

一、 漏洞 CVE-2025-9907 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2025-9907 的公开POC

三、漏洞 CVE-2025-9907 的情报信息

四、漏洞 CVE-2025-9907 的评论

发表评论

一、漏洞 CVE-2025-9907 基础信息