CVE-2024-9620

A flaw was found in Event-Driven Automation (EDA) in Ansible Automation Platform (AAP), which lacks encryption of sensitive information. An attacker with network access could exploit this vulnerability by sniffing the plaintext data transmitted between the EDA and AAP. An attacker with system access could exploit this vulnerability by reading the plaintext data stored in EDA and AAP databases.

• CWE-319

• https://access.redhat.com/security/cve/CVE-2024-9620
• https://bugzilla.redhat.com/show_bug.cgi?id=2317129

Published

Oct 8, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9614The Constant Contact Forms by MailMunch plugin for WordPress…6.1
• CVE-2024-9615The BulkPress plugin for WordPress is vulnerable to Reflecte…6.1
• CVE-2024-9616The BlockMeister – Block Pattern Builder plugin for WordPres…6.1
• CVE-2024-9617An IDOR vulnerability in danswer-ai/danswer v0.3.94 allows a…6.5
• CVE-2024-9618The Master Addons – Elementor Addons with White Label, Free …5.4
• CVE-2024-9619The WP SHAPES plugin for WordPress is vulnerable to Stored C…6.4
• CVE-2024-9621A vulnerability was found in Quarkus CXF. Passwords and othe…5.3
• CVE-2024-9622A vulnerability was found in the resteasy-netty4 library ari…5.3
• CVE-2024-9623An issue was discovered in GitLab CE/EE affecting all versio…6.5
• CVE-2024-9624The WP All Import Pro plugin for WordPress is vulnerable to …7.6
• CVE-2024-9625Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-9626The Editorial Assistant by Sovrn plugin for WordPress is vul…4.3