What is CVE-2025-53861?

CVE-2025-53861 is a low-severity vulnerability in Red Hat Ansible Automation Platform 2, classified under Cleartext Transmission of Sensitive Information. CVSS score: 3.1/10. Published 2025-07-11.

How severe is CVE-2025-53861?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Red Hat Ansible Automation Platform 2

CVE-2025-53861

A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data.

EPSS: 0.001 (1.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Red Hat Ansible Automation Platform 2
Redhat Ansible_automation_platform — versions 2.0

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry, Vendor Advisory)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Issue Tracking)

Frequently asked questions

What is CVE-2025-53861?: CVE-2025-53861 is a low-severity vulnerability in Red Hat Ansible Automation Platform 2, classified under Cleartext Transmission of Sensitive Information. CVSS score: 3.1/10. Published 2025-07-11.
How severe is CVE-2025-53861?: Low severity. CVSS v3 base score is 3.1 out of 10.