What is the CVSS score of CVE-2024-11079?

CVE-2024-11079 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Ansible-Core. This are affected by CVE-2024-11079?

Organizations using A flaw should be aware of moderate risk from CVE-2024-11079, a input validation vulnerability rated CVSS 5.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2024-11079?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ansible-Core. This CVE-2024-11079

MEDIUM

Improper Input Validation (CWE-20)

2024-11-12 secalert@redhat.com

GHSA-99w6-3xph-cx78

RCE

5.5

CVSS 3.1 · Vendor: redhat

Severity by source

Vendor (redhat) PRIMARY

5.5 MEDIUM

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Primary rating from Vendor (redhat) · only source for this CVE.

CVSS VectorVendor: redhat

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 18, 2026 - 02:45 vuln.today

CVE Published

Nov 12, 2024 - 00:15 nvd

MEDIUM 5.5

DescriptionCVE.org

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

AnalysisAI

A flaw was found in Ansible-Core.

Technical ContextAI

Remote code execution allows an attacker to run arbitrary commands or code on the target system over a network without prior authentication. This vulnerability is classified as Improper Input Validation (CWE-20).

Affected ProductsAI

Affected: Ansible-Core

RemediationAI

Apply vendor patches immediately. Restrict network access to vulnerable services. Implement network segmentation and monitoring for anomalous activity.