CVE-2025-9909 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of mis…
Medium CVSS: 6.7

CVE-2025-9909

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-pot route to intercept and exfiltrate user credentials, potentially maintaining persistent access or creating a backdoor even after their permissions are revoked.
Vendor
Redhat
Product
Ansible Automation Platform
CWE
CWE-647
Yayın Tarihi
2026-02-27 08:17:08
Güncelleme
2026-03-25 20:18:06
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-647 Ansible Automation Platform MEDIUM Redhat 2026

Referanslar

https://access.redhat.com/errata/RHSA-2025:21768 https://access.redhat.com/errata/RHSA-2025:21775 https://access.redhat.com/errata/RHSA-2025:23069 https://access.redhat.com/errata/RHSA-2025:23131 https://access.redhat.com/security/cve/CVE-2025-9909 https://bugzilla.redhat.com/show_bug.cgi?id=2392836