CVE-2025-53862
Redhat Ansible Automation Platform 2.0
Raw vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NSummary
CVE-2025-53862 is a low-severity Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) vulnerability in Redhat Ansible Automation Platform. Its CVSS base score is 3.5 (Low).
Operationally, ranked at the 7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and IA-2 (Identification and Authentication (Organizational Users)) — see the control section below for these in your framework.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21135
Vulnerability Data
A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data that may contain important information.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
- 5 hardening rules · 4 OS baselines
V14.1.2
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces authorization decisions on the three API endpoints so that unauthenticated requests cannot retrieve sensitive data.
Requires identification and authentication of users before any access to the API endpoints is granted, eliminating the unauthenticated exposure path.
Explicitly limits the set of actions permitted without identification or authentication, preventing the three verbose endpoints from being reachable anonymously.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Enforcing least-privilege access permissions directly prevents unauthorized actors from reaching sensitive system information.
Protecting environments from unauthorized logical access stops exposure of internal system details to outsiders.
Secure-development practices reduce the chance of code paths that leak sensitive system information.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Keeping internal maps, directories, and signage from public view prevents disclosure of system or facility details that could aid reconnaissance or targeted attacks.