{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "Insecure non-multi options in clone and clone_from is not blocked", "tracking": { "current_release_date": "2026-07-30T11:48:58+00:00", "generator": { "date": "2026-07-30T11:48:58+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2023-40267", "initial_release_date": "2023-08-11T00:00:00+00:00", "revision_history": [ { "date": "2026-07-30T11:48:58+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 1.2", "product": { "name": "Red Hat Ansible Automation Platform 1.2", "product_id": "ansible_automation_platform-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.6", "product": { "name": "Red Hat Ansible Automation Platform 2.6", "product_id": "ansible_automation_platform-2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.3", "product": { "name": "Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.3::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.3", "product": { "name": "Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el9", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.3::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4", "product": { "name": "Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4", "product": { "name": "Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el9", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Tower 3.8", "product": { "name": "Red Hat Ansible Tower 3.8", "product_id": "ansible_tower-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_tower:3" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 16.1 (Train)", "product": { "name": "Red Hat OpenStack Platform 16.1 (Train)", "product_id": "openstack-16.1-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:16.1" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 16.2 (Train)", "product": { "name": "Red Hat OpenStack Platform 16.2 (Train)", "product_id": "openstack-16.2-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:16.2" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 17.0 (Wallaby)", "product": { "name": "Red Hat OpenStack Platform 17.0 (Wallaby)", "product_id": "openstack-17.0-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.0" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 17.1 (Wallaby)", "product": { "name": "Red Hat OpenStack Platform 17.1 (Wallaby)", "product_id": "openstack-17.1-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform rhos-18.0.0", "product": { "name": "Red Hat OpenStack Platform rhos-18.0.0", "product_id": "openstack-18.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:18.0" } } }, { "category": "product_name", "name": "Red Hat Certification (for RHEL Server)", "product": { "name": "Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-6", "product_identification_helper": { "cpe": "cpe:/a:redhat:certifications:1" } } }, { "category": "product_name", "name": "Red Hat Certification (for RHEL Server)", "product": { "name": "Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7", "product_identification_helper": { "cpe": "cpe:/a:redhat:certifications:1" } } }, { "category": "product_name", "name": "Red Hat Certification (for RHEL Server)", "product": { "name": "Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:certifications:1" } } }, { "category": "product_name", "name": "Red Hat Certification (for RHEL Server)", "product": { "name": "Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-9-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:certifications:9" } } }, { "category": "product_name", "name": "Red Hat Satellite", "product": { "name": "Red Hat Satellite", "product_id": "rhn_satellite_6-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.13.0", "product": { "name": "Red Hat Satellite 6.13.0", "product_id": "rhn_satellite_6.13::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_capsule:6.13::el8" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.14.0", "product": { "name": "Red Hat Satellite 6.14.0", "product_id": "rhn_satellite_6.14::el8", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_capsule:6.14::el8" } } }, { "category": "product_version", "name": "automation-controller", "product": { "name": "automation-controller", "product_id": "automation-controller-0:4.3.13-1.el8ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.3.13-1.el8ap?epoch=0" } } }, { "category": "product_version", "name": "automation-controller", "product": { "name": "automation-controller", "product_id": "automation-controller-0:4.3.13-1.el9ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.3.13-1.el9ap?epoch=0" } } }, { "category": "product_version", "name": "automation-controller", "product": { "name": "automation-controller", "product_id": "automation-controller-0:4.4.3-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.4.3-1.el8ap?arch=src&epoch=0" } } }, { "category": "product_version", "name": "automation-controller", "product": { "name": "automation-controller", "product_id": "automation-controller-0:4.4.3-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.4.3-1.el9ap?arch=src&epoch=0" } } }, { "category": "product_version", "name": "automation-controller-venv-tower", "product": { "name": "automation-controller-venv-tower", "product_id": "automation-controller-venv-tower-0:4.3.13-1.el8ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.3.13-1.el8ap?epoch=0" } } }, { "category": "product_version", "name": "automation-controller-venv-tower", "product": { "name": "automation-controller-venv-tower", "product_id": "automation-controller-venv-tower-0:4.3.13-1.el9ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.3.13-1.el9ap?epoch=0" } } }, { "category": "product_version", "name": "automation-controller-venv-tower", "product": { "name": "automation-controller-venv-tower", "product_id": "automation-controller-venv-tower-0:4.4.3-1.el8ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.4.3-1.el8ap?epoch=0" } } }, { "category": "product_version", "name": "automation-controller-venv-tower", "product": { "name": "automation-controller-venv-tower", "product_id": "automation-controller-venv-tower-0:4.4.3-1.el9ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.4.3-1.el9ap?epoch=0" } } }, { "category": "product_version", "name": "gitpython", "product": { "name": "gitpython", "product_id": "gitpython.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitpython?arch=src" } } }, { "category": "product_version", "name": "GitPython", "product": { "name": "GitPython", "product_id": "GitPython.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/GitPython?arch=src" } } }, { "category": "product_version", "name": "python-gitpython", "product": { "name": "python-gitpython", "product_id": "python-gitpython-0:3.1.32-1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-gitpython@3.1.32-1.el8pc?arch=src&epoch=0" } } }, { "category": "product_version", "name": "python-gitpython", "product": { "name": "python-gitpython", "product_id": "python-gitpython-0:3.1.32-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-gitpython@3.1.32-1.el9ap?arch=src&epoch=0" } } }, { "category": "product_version", "name": "python-gitpython", "product": { "name": "python-gitpython", "product_id": "python-gitpython.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-gitpython?arch=src" } } }, { "category": "product_version", "name": "python3-GitPython", "product": { "name": "python3-GitPython", "product_id": "python3-GitPython", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-GitPython" } } }, { "category": "product_version", "name": "python3-gitpython", "product": { "name": "python3-gitpython", "product_id": "python3-gitpython-0:3.1.32-1.el9ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-gitpython@3.1.32-1.el9ap?epoch=0" } } }, { "category": "product_version", "name": "python39-gitpython", "product": { "name": "python39-gitpython", "product_id": "python39-gitpython-0:3.1.32-1.el8ap", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-gitpython@3.1.32-1.el8ap?epoch=0" } } }, { "category": "product_version", "name": "python39-gitpython", "product": { "name": "python39-gitpython", "product_id": "python39-gitpython-0:3.1.32-1.el8pc", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-gitpython@3.1.32-1.el8pc?epoch=0" } } }, { "category": "product_version", "name": "python3x-gitpython", "product": { "name": "python3x-gitpython", "product_id": "python3x-gitpython-0:3.1.32-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-gitpython@3.1.32-1.el8ap?arch=src&epoch=0" } } }, { "category": "product_version", "name": "redhat-certification", "product": { "name": "redhat-certification", "product_id": "redhat-certification", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification" } } }, { "category": "product_version", "name": "redhat-certification-backend", "product": { "name": "redhat-certification-backend", "product_id": "redhat-certification-backend", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-backend" } } }, { "category": "product_version", "name": "redhat-certification-backend", "product": { "name": "redhat-certification-backend", "product_id": "redhat-certification-backend.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-backend?arch=src" } } }, { "category": "product_version", "name": "redhat-certification-baremetal", "product": { "name": "redhat-certification-baremetal", "product_id": "redhat-certification-baremetal", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-baremetal" } } }, { "category": "product_version", "name": "redhat-certification-cloud", "product": { "name": "redhat-certification-cloud", "product_id": "redhat-certification-cloud", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-cloud" } } }, { "category": "product_version", "name": "redhat-certification-cloud-sap", "product": { "name": "redhat-certification-cloud-sap", "product_id": "redhat-certification-cloud-sap", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-cloud-sap" } } }, { "category": "product_version", "name": "redhat-certification-cockpit", "product": { "name": "redhat-certification-cockpit", "product_id": "redhat-certification-cockpit", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-cockpit" } } }, { "category": "product_version", "name": "redhat-certification-container", "product": { "name": "redhat-certification-container", "product_id": "redhat-certification-container", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-container" } } }, { "category": "product_version", "name": "redhat-certification-fast-datapath", "product": { "name": "redhat-certification-fast-datapath", "product_id": "redhat-certification-fast-datapath", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-fast-datapath" } } }, { "category": "product_version", "name": "redhat-certification-hardware", "product": { "name": "redhat-certification-hardware", "product_id": "redhat-certification-hardware", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-hardware" } } }, { "category": "product_version", "name": "redhat-certification-hardware-ai", "product": { "name": "redhat-certification-hardware-ai", "product_id": "redhat-certification-hardware-ai", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-hardware-ai" } } }, { "category": "product_version", "name": "redhat-certification-hardware-preview", "product": { "name": "redhat-certification-hardware-preview", "product_id": "redhat-certification-hardware-preview", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-hardware-preview" } } }, { "category": "product_version", "name": "redhat-certification-ironic-preview", "product": { "name": "redhat-certification-ironic-preview", "product_id": "redhat-certification-ironic-preview", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-ironic-preview" } } }, { "category": "product_version", "name": "redhat-certification-openshift", "product": { "name": "redhat-certification-openshift", "product_id": "redhat-certification-openshift", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-openshift" } } }, { "category": "product_version", "name": "redhat-certification-openstack", "product": { "name": "redhat-certification-openstack", "product_id": "redhat-certification-openstack", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-openstack" } } }, { "category": "product_version", "name": "redhat-certification-software", "product": { "name": "redhat-certification-software", "product_id": "redhat-certification-software", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification-software" } } }, { "category": "product_version", "name": "redhat-certification", "product": { "name": "redhat-certification", "product_id": "redhat-certification.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-certification?arch=src" } } }, { "category": "product_version", "name": "redhat-interoperability-cloud-instance", "product": { "name": "redhat-interoperability-cloud-instance", "product_id": "redhat-interoperability-cloud-instance", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-interoperability-cloud-instance" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.3.13-1.el8ap as a component of Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el8:automation-controller-0:4.3.13-1.el8ap" }, "product_reference": "automation-controller-0:4.3.13-1.el8ap", "relates_to_product_reference": "ansible_automation_platform-2.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.3.13-1.el9ap as a component of Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el9:automation-controller-0:4.3.13-1.el9ap" }, "product_reference": "automation-controller-0:4.3.13-1.el9ap", "relates_to_product_reference": "ansible_automation_platform-2.3::el9" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.4.3-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el8:automation-controller-0:4.4.3-1.el8ap.src" }, "product_reference": "automation-controller-0:4.4.3-1.el8ap.src", "relates_to_product_reference": "ansible_automation_platform-2.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.4.3-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el9:automation-controller-0:4.4.3-1.el9ap.src" }, "product_reference": "automation-controller-0:4.4.3-1.el9ap.src", "relates_to_product_reference": "ansible_automation_platform-2.4::el9" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.3.13-1.el8ap as a component of Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el8:automation-controller-venv-tower-0:4.3.13-1.el8ap" }, "product_reference": "automation-controller-venv-tower-0:4.3.13-1.el8ap", "relates_to_product_reference": "ansible_automation_platform-2.3::el8" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.3.13-1.el9ap as a component of Red Hat Ansible Automation Platform 2.3", "product_id": "ansible_automation_platform-2.3::el9:automation-controller-venv-tower-0:4.3.13-1.el9ap" }, "product_reference": "automation-controller-venv-tower-0:4.3.13-1.el9ap", "relates_to_product_reference": "ansible_automation_platform-2.3::el9" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.4.3-1.el8ap as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el8:automation-controller-venv-tower-0:4.4.3-1.el8ap" }, "product_reference": "automation-controller-venv-tower-0:4.4.3-1.el8ap", "relates_to_product_reference": "ansible_automation_platform-2.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.4.3-1.el9ap as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el9:automation-controller-venv-tower-0:4.4.3-1.el9ap" }, "product_reference": "automation-controller-venv-tower-0:4.4.3-1.el9ap", "relates_to_product_reference": "ansible_automation_platform-2.4::el9" }, { "category": "default_component_of", "full_product_name": { "name": "gitpython.src as a component of Red Hat Ansible Tower 3.8", "product_id": "ansible_tower-3:gitpython.src" }, "product_reference": "gitpython.src", "relates_to_product_reference": "ansible_tower-3" }, { "category": "default_component_of", "full_product_name": { "name": "GitPython.src as a component of Red Hat OpenStack Platform 17.0 (Wallaby)", "product_id": "openstack-17.0-default:GitPython.src" }, "product_reference": "GitPython.src", "relates_to_product_reference": "openstack-17.0-default" }, { "category": "default_component_of", "full_product_name": { "name": "GitPython.src as a component of Red Hat OpenStack Platform rhos-18.0.0", "product_id": "openstack-18.0:GitPython.src" }, "product_reference": "GitPython.src", "relates_to_product_reference": "openstack-18.0" }, { "category": "default_component_of", "full_product_name": { "name": "GitPython.src as a component of Red Hat OpenStack Platform 17.1 (Wallaby)", "product_id": "openstack-17.1-default:GitPython.src" }, "product_reference": "GitPython.src", "relates_to_product_reference": "openstack-17.1-default" }, { "category": "default_component_of", "full_product_name": { "name": "GitPython.src as a component of Red Hat OpenStack Platform 16.1 (Train)", "product_id": "openstack-16.1-default:GitPython.src" }, "product_reference": "GitPython.src", "relates_to_product_reference": "openstack-16.1-default" }, { "category": "default_component_of", "full_product_name": { "name": "gitpython.src as a component of Red Hat Ansible Automation Platform 1.2", "product_id": "ansible_automation_platform-1:gitpython.src" }, "product_reference": "gitpython.src", "relates_to_product_reference": "ansible_automation_platform-1" }, { "category": "default_component_of", "full_product_name": { "name": "GitPython.src as a component of Red Hat OpenStack Platform 16.2 (Train)", "product_id": "openstack-16.2-default:GitPython.src" }, "product_reference": "GitPython.src", "relates_to_product_reference": "openstack-16.2-default" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.32-1.el8pc.src as a component of Red Hat Satellite 6.13.0", "product_id": "rhn_satellite_6.13::el8:python-gitpython-0:3.1.32-1.el8pc.src" }, "product_reference": "python-gitpython-0:3.1.32-1.el8pc.src", "relates_to_product_reference": "rhn_satellite_6.13::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.32-1.el8pc.src as a component of Red Hat Satellite 6.14.0", "product_id": "rhn_satellite_6.14::el8:python-gitpython-0:3.1.32-1.el8pc.src" }, "product_reference": "python-gitpython-0:3.1.32-1.el8pc.src", "relates_to_product_reference": "rhn_satellite_6.14::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.32-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el9:python-gitpython-0:3.1.32-1.el9ap.src" }, "product_reference": "python-gitpython-0:3.1.32-1.el9ap.src", "relates_to_product_reference": "ansible_automation_platform-2.4::el9" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython.src as a component of Red Hat Ansible Automation Platform 2.6", "product_id": "ansible_automation_platform-2:python-gitpython.src" }, "product_reference": "python-gitpython.src", "relates_to_product_reference": "ansible_automation_platform-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython.src as a component of Red Hat Satellite", "product_id": "rhn_satellite_6-default:python-gitpython.src" }, "product_reference": "python-gitpython.src", "relates_to_product_reference": "rhn_satellite_6-default" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython as a component of Red Hat OpenStack Platform 16.2 (Train)", "product_id": "openstack-16.2-default:python3-GitPython" }, "product_reference": "python3-GitPython", "relates_to_product_reference": "openstack-16.2-default" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython as a component of Red Hat OpenStack Platform 16.1 (Train)", "product_id": "openstack-16.1-default:python3-GitPython" }, "product_reference": "python3-GitPython", "relates_to_product_reference": "openstack-16.1-default" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython as a component of Red Hat OpenStack Platform 17.0 (Wallaby)", "product_id": "openstack-17.0-default:python3-GitPython" }, "product_reference": "python3-GitPython", "relates_to_product_reference": "openstack-17.0-default" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython as a component of Red Hat OpenStack Platform 17.1 (Wallaby)", "product_id": "openstack-17.1-default:python3-GitPython" }, "product_reference": "python3-GitPython", "relates_to_product_reference": "openstack-17.1-default" }, { "category": "default_component_of", "full_product_name": { "name": "python3-gitpython-0:3.1.32-1.el9ap as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el9:python3-gitpython-0:3.1.32-1.el9ap" }, "product_reference": "python3-gitpython-0:3.1.32-1.el9ap", "relates_to_product_reference": "ansible_automation_platform-2.4::el9" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.32-1.el8ap as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el8:python39-gitpython-0:3.1.32-1.el8ap" }, "product_reference": "python39-gitpython-0:3.1.32-1.el8ap", "relates_to_product_reference": "ansible_automation_platform-2.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.32-1.el8pc as a component of Red Hat Satellite 6.13.0", "product_id": "rhn_satellite_6.13::el8:python39-gitpython-0:3.1.32-1.el8pc" }, "product_reference": "python39-gitpython-0:3.1.32-1.el8pc", "relates_to_product_reference": "rhn_satellite_6.13::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.32-1.el8pc as a component of Red Hat Satellite 6.14.0", "product_id": "rhn_satellite_6.14::el8:python39-gitpython-0:3.1.32-1.el8pc" }, "product_reference": "python39-gitpython-0:3.1.32-1.el8pc", "relates_to_product_reference": "rhn_satellite_6.14::el8" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-gitpython-0:3.1.32-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4", "product_id": "ansible_automation_platform-2.4::el8:python3x-gitpython-0:3.1.32-1.el8ap.src" }, "product_reference": "python3x-gitpython-0:3.1.32-1.el8ap.src", "relates_to_product_reference": "ansible_automation_platform-2.4::el8" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification" }, "product_reference": "redhat-certification", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification" }, "product_reference": "redhat-certification", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-backend as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-6:redhat-certification-backend" }, "product_reference": "redhat-certification-backend", "relates_to_product_reference": "rhcertification-6" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-backend as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-backend" }, "product_reference": "redhat-certification-backend", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-backend as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-backend" }, "product_reference": "redhat-certification-backend", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-backend.src as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-6:redhat-certification-backend.src" }, "product_reference": "redhat-certification-backend.src", "relates_to_product_reference": "rhcertification-6" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-baremetal as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-baremetal" }, "product_reference": "redhat-certification-baremetal", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-baremetal as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-baremetal" }, "product_reference": "redhat-certification-baremetal", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cloud as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-cloud" }, "product_reference": "redhat-certification-cloud", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cloud as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-cloud" }, "product_reference": "redhat-certification-cloud", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cloud as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-6:redhat-certification-cloud" }, "product_reference": "redhat-certification-cloud", "relates_to_product_reference": "rhcertification-6" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cloud-sap as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-cloud-sap" }, "product_reference": "redhat-certification-cloud-sap", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cloud-sap as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-cloud-sap" }, "product_reference": "redhat-certification-cloud-sap", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cockpit as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-cockpit" }, "product_reference": "redhat-certification-cockpit", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-cockpit as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-cockpit" }, "product_reference": "redhat-certification-cockpit", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-container as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-container" }, "product_reference": "redhat-certification-container", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-container as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-container" }, "product_reference": "redhat-certification-container", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-fast-datapath as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-fast-datapath" }, "product_reference": "redhat-certification-fast-datapath", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-fast-datapath as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-fast-datapath" }, "product_reference": "redhat-certification-fast-datapath", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-hardware" }, "product_reference": "redhat-certification-hardware", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-hardware" }, "product_reference": "redhat-certification-hardware", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware-ai as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-hardware-ai" }, "product_reference": "redhat-certification-hardware-ai", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware-ai as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-hardware-ai" }, "product_reference": "redhat-certification-hardware-ai", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware-preview as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-hardware-preview" }, "product_reference": "redhat-certification-hardware-preview", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-hardware-preview as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-hardware-preview" }, "product_reference": "redhat-certification-hardware-preview", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-ironic-preview as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-ironic-preview" }, "product_reference": "redhat-certification-ironic-preview", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-ironic-preview as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-ironic-preview" }, "product_reference": "redhat-certification-ironic-preview", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-openshift as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-openshift" }, "product_reference": "redhat-certification-openshift", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-openshift as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-openshift" }, "product_reference": "redhat-certification-openshift", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-openstack as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-openstack" }, "product_reference": "redhat-certification-openstack", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-openstack as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-openstack" }, "product_reference": "redhat-certification-openstack", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-software as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification-software" }, "product_reference": "redhat-certification-software", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification-software as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification-software" }, "product_reference": "redhat-certification-software", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification.src as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-certification.src" }, "product_reference": "redhat-certification.src", "relates_to_product_reference": "rhcertification-7" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification.src as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-certification.src" }, "product_reference": "redhat-certification.src", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-certification.src as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-9-default:redhat-certification.src" }, "product_reference": "redhat-certification.src", "relates_to_product_reference": "rhcertification-9-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-interoperability-cloud-instance as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-8-default:redhat-interoperability-cloud-instance" }, "product_reference": "redhat-interoperability-cloud-instance", "relates_to_product_reference": "rhcertification-8-default" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-interoperability-cloud-instance as a component of Red Hat Certification (for RHEL Server)", "product_id": "rhcertification-7:redhat-interoperability-cloud-instance" }, "product_reference": "redhat-interoperability-cloud-instance", "relates_to_product_reference": "rhcertification-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40267", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2023-08-11T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "ansible_automation_platform-1:gitpython.src", "openstack-18.0:GitPython.src" ] } ], "notes": [ { "category": "other", "text": "In Red Hat Openstack, Red Hat Ansible Automation Platform, and Red Hat Certification Program, while the gitpython dependency is present, the affected codebase is not being used. \n\nRed Hat Satellite does not use the affected functions during runtime, therefore the possible impact is limited to Moderate.", "title": "Statement" }, { "category": "description", "text": "An improper input validation vulnerability was found in GitPython. This flaw allows an attacker to inject a maliciously crafted remote URL into the clone command, possibly leading to remote code execution.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "ansible_automation_platform-2.3::el8:automation-controller-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el8:automation-controller-venv-tower-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el9:automation-controller-0:4.3.13-1.el9ap", "ansible_automation_platform-2.3::el9:automation-controller-venv-tower-0:4.3.13-1.el9ap", "ansible_automation_platform-2.4::el8:automation-controller-0:4.4.3-1.el8ap.src", "ansible_automation_platform-2.4::el8:automation-controller-venv-tower-0:4.4.3-1.el8ap", "ansible_automation_platform-2.4::el8:python39-gitpython-0:3.1.32-1.el8ap", "ansible_automation_platform-2.4::el8:python3x-gitpython-0:3.1.32-1.el8ap.src", "ansible_automation_platform-2.4::el9:automation-controller-0:4.4.3-1.el9ap.src", "ansible_automation_platform-2.4::el9:automation-controller-venv-tower-0:4.4.3-1.el9ap", "ansible_automation_platform-2.4::el9:python-gitpython-0:3.1.32-1.el9ap.src", "ansible_automation_platform-2.4::el9:python3-gitpython-0:3.1.32-1.el9ap", "rhn_satellite_6.13::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.13::el8:python39-gitpython-0:3.1.32-1.el8pc", "rhn_satellite_6.14::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.14::el8:python39-gitpython-0:3.1.32-1.el8pc" ], "known_affected": [ "ansible_automation_platform-2:python-gitpython.src", "ansible_tower-3:gitpython.src", "openstack-16.1-default:GitPython.src", "openstack-16.1-default:python3-GitPython", "openstack-16.2-default:GitPython.src", "openstack-16.2-default:python3-GitPython", "openstack-17.0-default:GitPython.src", "openstack-17.0-default:python3-GitPython", "openstack-17.1-default:GitPython.src", "openstack-17.1-default:python3-GitPython", "rhcertification-6:redhat-certification-backend", "rhcertification-6:redhat-certification-backend.src", "rhcertification-6:redhat-certification-cloud", "rhcertification-7:redhat-certification", "rhcertification-7:redhat-certification-backend", "rhcertification-7:redhat-certification-baremetal", "rhcertification-7:redhat-certification-cloud", "rhcertification-7:redhat-certification-cloud-sap", "rhcertification-7:redhat-certification-cockpit", "rhcertification-7:redhat-certification-container", "rhcertification-7:redhat-certification-fast-datapath", "rhcertification-7:redhat-certification-hardware", "rhcertification-7:redhat-certification-hardware-ai", "rhcertification-7:redhat-certification-hardware-preview", "rhcertification-7:redhat-certification-ironic-preview", "rhcertification-7:redhat-certification-openshift", "rhcertification-7:redhat-certification-openstack", "rhcertification-7:redhat-certification-software", "rhcertification-7:redhat-certification.src", "rhcertification-7:redhat-interoperability-cloud-instance", "rhcertification-8-default:redhat-certification", "rhcertification-8-default:redhat-certification-backend", "rhcertification-8-default:redhat-certification-baremetal", "rhcertification-8-default:redhat-certification-cloud", "rhcertification-8-default:redhat-certification-cloud-sap", "rhcertification-8-default:redhat-certification-cockpit", "rhcertification-8-default:redhat-certification-container", "rhcertification-8-default:redhat-certification-fast-datapath", "rhcertification-8-default:redhat-certification-hardware", "rhcertification-8-default:redhat-certification-hardware-ai", "rhcertification-8-default:redhat-certification-hardware-preview", "rhcertification-8-default:redhat-certification-ironic-preview", "rhcertification-8-default:redhat-certification-openshift", "rhcertification-8-default:redhat-certification-openstack", "rhcertification-8-default:redhat-certification-software", "rhcertification-8-default:redhat-certification.src", "rhcertification-8-default:redhat-interoperability-cloud-instance", "rhcertification-9-default:redhat-certification.src", "rhn_satellite_6-default:python-gitpython.src" ], "known_not_affected": [ "ansible_automation_platform-1:gitpython.src", "openstack-18.0:GitPython.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-40267" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40267" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-40267" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "openstack-16.1-default:GitPython.src", "openstack-16.1-default:python3-GitPython", "openstack-16.2-default:GitPython.src", "openstack-16.2-default:python3-GitPython", "openstack-17.0-default:GitPython.src", "openstack-17.0-default:python3-GitPython", "openstack-17.1-default:GitPython.src", "openstack-17.1-default:python3-GitPython" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "rhcertification-6:redhat-certification-backend", "rhcertification-6:redhat-certification-backend.src", "rhcertification-6:redhat-certification-cloud", "rhcertification-7:redhat-certification", "rhcertification-7:redhat-certification-backend", "rhcertification-7:redhat-certification-baremetal", "rhcertification-7:redhat-certification-cloud", "rhcertification-7:redhat-certification-cloud-sap", "rhcertification-7:redhat-certification-cockpit", "rhcertification-7:redhat-certification-container", "rhcertification-7:redhat-certification-fast-datapath", "rhcertification-7:redhat-certification-hardware", "rhcertification-7:redhat-certification-hardware-ai", "rhcertification-7:redhat-certification-hardware-preview", "rhcertification-7:redhat-certification-ironic-preview", "rhcertification-7:redhat-certification-openshift", "rhcertification-7:redhat-certification-openstack", "rhcertification-7:redhat-certification-software", "rhcertification-7:redhat-certification.src", "rhcertification-7:redhat-interoperability-cloud-instance" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "ansible_automation_platform-2:python-gitpython.src", "ansible_tower-3:gitpython.src", "rhcertification-8-default:redhat-certification", "rhcertification-8-default:redhat-certification-backend", "rhcertification-8-default:redhat-certification-baremetal", "rhcertification-8-default:redhat-certification-cloud", "rhcertification-8-default:redhat-certification-cloud-sap", "rhcertification-8-default:redhat-certification-cockpit", "rhcertification-8-default:redhat-certification-container", "rhcertification-8-default:redhat-certification-fast-datapath", "rhcertification-8-default:redhat-certification-hardware", "rhcertification-8-default:redhat-certification-hardware-ai", "rhcertification-8-default:redhat-certification-hardware-preview", "rhcertification-8-default:redhat-certification-ironic-preview", "rhcertification-8-default:redhat-certification-openshift", "rhcertification-8-default:redhat-certification-openstack", "rhcertification-8-default:redhat-certification-software", "rhcertification-8-default:redhat-certification.src", "rhcertification-8-default:redhat-interoperability-cloud-instance", "rhcertification-9-default:redhat-certification.src", "rhn_satellite_6-default:python-gitpython.src" ] }, { "category": "vendor_fix", "date": "2023-09-05T11:53:51+00:00", "details": "Apply advisory RHSA-2023:4971 as per vendors instructions.", "product_ids": [ "ansible_automation_platform-2.4::el8:automation-controller-0:4.4.3-1.el8ap.src", "ansible_automation_platform-2.4::el8:automation-controller-venv-tower-0:4.4.3-1.el8ap", "ansible_automation_platform-2.4::el8:python39-gitpython-0:3.1.32-1.el8ap", "ansible_automation_platform-2.4::el8:python3x-gitpython-0:3.1.32-1.el8ap.src", "ansible_automation_platform-2.4::el9:automation-controller-0:4.4.3-1.el9ap.src", "ansible_automation_platform-2.4::el9:automation-controller-venv-tower-0:4.4.3-1.el9ap", "ansible_automation_platform-2.4::el9:python-gitpython-0:3.1.32-1.el9ap.src", "ansible_automation_platform-2.4::el9:python3-gitpython-0:3.1.32-1.el9ap" ], "url": "https://access.redhat.com/errata/RHSA-2023:4971" }, { "category": "vendor_fix", "date": "2023-09-06T13:06:22+00:00", "details": "Apply advisory RHSA-2023:4991 as per vendors instructions.", "product_ids": [ "ansible_automation_platform-2.3::el8:automation-controller-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el8:automation-controller-venv-tower-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el9:automation-controller-0:4.3.13-1.el9ap", "ansible_automation_platform-2.3::el9:automation-controller-venv-tower-0:4.3.13-1.el9ap" ], "url": "https://access.redhat.com/errata/RHSA-2023:4991" }, { "category": "vendor_fix", "date": "2023-10-19T13:15:21+00:00", "details": "Apply advisory RHSA-2023:5931 as per vendors instructions.", "product_ids": [ "rhn_satellite_6.13::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.13::el8:python39-gitpython-0:3.1.32-1.el8pc" ], "url": "https://access.redhat.com/errata/RHSA-2023:5931" }, { "category": "vendor_fix", "date": "2023-11-08T14:26:58+00:00", "details": "Apply advisory RHSA-2023:6818 as per vendors instructions.", "product_ids": [ "rhn_satellite_6.14::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.14::el8:python39-gitpython-0:3.1.32-1.el8pc" ], "url": "https://access.redhat.com/errata/RHSA-2023:6818" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "ansible_automation_platform-1:gitpython.src", "ansible_automation_platform-2.3::el8:automation-controller-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el8:automation-controller-venv-tower-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el9:automation-controller-0:4.3.13-1.el9ap", "ansible_automation_platform-2.3::el9:automation-controller-venv-tower-0:4.3.13-1.el9ap", "ansible_automation_platform-2.4::el8:automation-controller-0:4.4.3-1.el8ap.src", "ansible_automation_platform-2.4::el8:automation-controller-venv-tower-0:4.4.3-1.el8ap", "ansible_automation_platform-2.4::el8:python39-gitpython-0:3.1.32-1.el8ap", "ansible_automation_platform-2.4::el8:python3x-gitpython-0:3.1.32-1.el8ap.src", "ansible_automation_platform-2.4::el9:automation-controller-0:4.4.3-1.el9ap.src", "ansible_automation_platform-2.4::el9:automation-controller-venv-tower-0:4.4.3-1.el9ap", "ansible_automation_platform-2.4::el9:python-gitpython-0:3.1.32-1.el9ap.src", "ansible_automation_platform-2.4::el9:python3-gitpython-0:3.1.32-1.el9ap", "ansible_automation_platform-2:python-gitpython.src", "ansible_tower-3:gitpython.src", "openstack-16.1-default:GitPython.src", "openstack-16.1-default:python3-GitPython", "openstack-16.2-default:GitPython.src", "openstack-16.2-default:python3-GitPython", "openstack-17.0-default:GitPython.src", "openstack-17.0-default:python3-GitPython", "openstack-17.1-default:GitPython.src", "openstack-17.1-default:python3-GitPython", "openstack-18.0:GitPython.src", "rhcertification-6:redhat-certification-backend", "rhcertification-6:redhat-certification-backend.src", "rhcertification-6:redhat-certification-cloud", "rhcertification-7:redhat-certification", "rhcertification-7:redhat-certification-backend", "rhcertification-7:redhat-certification-baremetal", "rhcertification-7:redhat-certification-cloud", "rhcertification-7:redhat-certification-cloud-sap", "rhcertification-7:redhat-certification-cockpit", "rhcertification-7:redhat-certification-container", "rhcertification-7:redhat-certification-fast-datapath", "rhcertification-7:redhat-certification-hardware", "rhcertification-7:redhat-certification-hardware-ai", "rhcertification-7:redhat-certification-hardware-preview", "rhcertification-7:redhat-certification-ironic-preview", "rhcertification-7:redhat-certification-openshift", "rhcertification-7:redhat-certification-openstack", "rhcertification-7:redhat-certification-software", "rhcertification-7:redhat-certification.src", "rhcertification-7:redhat-interoperability-cloud-instance", "rhcertification-8-default:redhat-certification", "rhcertification-8-default:redhat-certification-backend", "rhcertification-8-default:redhat-certification-baremetal", "rhcertification-8-default:redhat-certification-cloud", "rhcertification-8-default:redhat-certification-cloud-sap", "rhcertification-8-default:redhat-certification-cockpit", "rhcertification-8-default:redhat-certification-container", "rhcertification-8-default:redhat-certification-fast-datapath", "rhcertification-8-default:redhat-certification-hardware", "rhcertification-8-default:redhat-certification-hardware-ai", "rhcertification-8-default:redhat-certification-hardware-preview", "rhcertification-8-default:redhat-certification-ironic-preview", "rhcertification-8-default:redhat-certification-openshift", "rhcertification-8-default:redhat-certification-openstack", "rhcertification-8-default:redhat-certification-software", "rhcertification-8-default:redhat-certification.src", "rhcertification-8-default:redhat-interoperability-cloud-instance", "rhcertification-9-default:redhat-certification.src", "rhn_satellite_6-default:python-gitpython.src", "rhn_satellite_6.13::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.13::el8:python39-gitpython-0:3.1.32-1.el8pc", "rhn_satellite_6.14::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.14::el8:python39-gitpython-0:3.1.32-1.el8pc" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "ansible_automation_platform-1:gitpython.src", "ansible_automation_platform-2.4::el8:automation-controller-0:4.4.3-1.el8ap.src", "ansible_automation_platform-2.4::el9:automation-controller-0:4.4.3-1.el9ap.src", "ansible_automation_platform-2.4::el9:automation-controller-venv-tower-0:4.4.3-1.el9ap", "ansible_automation_platform-2.4::el9:python-gitpython-0:3.1.32-1.el9ap.src", "ansible_automation_platform-2.4::el9:python3-gitpython-0:3.1.32-1.el9ap", "ansible_tower-3:gitpython.src", "openstack-16.1-default:GitPython.src", "openstack-16.1-default:python3-GitPython", "openstack-16.2-default:GitPython.src", "openstack-16.2-default:python3-GitPython", "openstack-17.0-default:GitPython.src", "openstack-17.0-default:python3-GitPython", "openstack-17.1-default:GitPython.src", "openstack-17.1-default:python3-GitPython", "openstack-18.0:GitPython.src", "rhcertification-6:redhat-certification-backend", "rhcertification-6:redhat-certification-backend.src", "rhcertification-6:redhat-certification-cloud", "rhcertification-7:redhat-certification", "rhcertification-7:redhat-certification-backend", "rhcertification-7:redhat-certification-baremetal", "rhcertification-7:redhat-certification-cloud", "rhcertification-7:redhat-certification-cloud-sap", "rhcertification-7:redhat-certification-cockpit", "rhcertification-7:redhat-certification-container", "rhcertification-7:redhat-certification-fast-datapath", "rhcertification-7:redhat-certification-hardware", "rhcertification-7:redhat-certification-hardware-ai", "rhcertification-7:redhat-certification-hardware-preview", "rhcertification-7:redhat-certification-ironic-preview", "rhcertification-7:redhat-certification-openshift", "rhcertification-7:redhat-certification-openstack", "rhcertification-7:redhat-certification-software", "rhcertification-7:redhat-certification.src", "rhcertification-7:redhat-interoperability-cloud-instance", "rhcertification-8-default:redhat-certification", "rhcertification-8-default:redhat-certification-backend", "rhcertification-8-default:redhat-certification-baremetal", "rhcertification-8-default:redhat-certification-cloud", "rhcertification-8-default:redhat-certification-cloud-sap", "rhcertification-8-default:redhat-certification-cockpit", "rhcertification-8-default:redhat-certification-container", "rhcertification-8-default:redhat-certification-fast-datapath", "rhcertification-8-default:redhat-certification-hardware", "rhcertification-8-default:redhat-certification-hardware-ai", "rhcertification-8-default:redhat-certification-hardware-preview", "rhcertification-8-default:redhat-certification-ironic-preview", "rhcertification-8-default:redhat-certification-openshift", "rhcertification-8-default:redhat-certification-openstack", "rhcertification-8-default:redhat-certification-software", "rhcertification-8-default:redhat-certification.src", "rhcertification-8-default:redhat-interoperability-cloud-instance", "rhcertification-9-default:redhat-certification.src" ] }, { "category": "impact", "details": "Moderate", "product_ids": [ "ansible_automation_platform-2.3::el8:automation-controller-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el8:automation-controller-venv-tower-0:4.3.13-1.el8ap", "ansible_automation_platform-2.3::el9:automation-controller-0:4.3.13-1.el9ap", "ansible_automation_platform-2.3::el9:automation-controller-venv-tower-0:4.3.13-1.el9ap", "ansible_automation_platform-2.4::el8:automation-controller-venv-tower-0:4.4.3-1.el8ap", "ansible_automation_platform-2.4::el8:python39-gitpython-0:3.1.32-1.el8ap", "ansible_automation_platform-2.4::el8:python3x-gitpython-0:3.1.32-1.el8ap.src", "ansible_automation_platform-2:python-gitpython.src", "rhn_satellite_6-default:python-gitpython.src", "rhn_satellite_6.13::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.13::el8:python39-gitpython-0:3.1.32-1.el8pc", "rhn_satellite_6.14::el8:python-gitpython-0:3.1.32-1.el8pc.src", "rhn_satellite_6.14::el8:python39-gitpython-0:3.1.32-1.el8pc" ] } ], "title": "Insecure non-multi options in clone and clone_from is not blocked" } ] }