Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the test_headers field when an event stream is in test mode. The possible outcome includes leakage of internal infrastructure details, accidental disclosure of user or system credentials, privilege escalation if high-value tokens are exposed, and persistent sensitive data exposure to all users with read access on the event stream.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 4 products
CVE-2025-9907 Sensitive Credential Exposure in Red Hat Ansible Automation Platform EDA Event Stream API https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-9907
Post summary
The text announces CVE‑2025‑9907, describing a sensitive credential exposure in the Red Hat Ansible Automation Platform EDA Event Stream API, without details on exploitation or mitigation.
CVE-2025-9907 A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credent… https://www.cve.org/CVERecord?id=CVE-2025-9907
Post summary
A flaw in Red Hat Ansible Automation Platform’s EDA Event Stream API enables exposure of sensitive client credentials.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | ansible_automation_platform | - | - | - |
| App | redhat | ansible_developer | 1.2 | - | - |
| App | redhat | ansible_developer | 1.3 | - | - |
| App | redhat | ansible_inside | 1.3 | - | - |
| App | redhat | ansible_inside | 1.4 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |