A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2025-53861 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2379360 | Issue Tracking |
Configurations
History
11 Aug 2025, 19:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2379360 - Issue Tracking | |
| References | () https://access.redhat.com/security/cve/CVE-2025-53861 - Vendor Advisory | |
| CPE | cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:* | |
| First Time |
Redhat
Redhat ansible Automation Platform |
11 Jul 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-11 13:15
Updated : 2025-08-11 19:21
NVD link : CVE-2025-53861
Mitre link : CVE-2025-53861
JSON object : View
Products Affected
redhat
- ansible_automation_platform
CWE
CWE-319
Cleartext Transmission of Sensitive Information