CVE-2023-4380 in Ansible

Prediction

by VulDB Data Team • 08/16/2023

A vulnerability has been found in Red Hat Ansible. Affected by this vulnerability is an unknown functionality of the component Project Import. The manipulation leads to information disclosure. The attack can only be initiated within the local network.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 08/16/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-237348
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00074
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-4380
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-4380
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-4380/