/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade python3.12-sqlparseUpgrade automation-gatewayUpgrade automation-gateway-proxyUpgrade automation-gateway-proxy-debugsourceUpgrade automation-gateway-proxy-serverUpgrade automation-controller-uiUpgrade receptor-debuginfoUpgrade automation-eda-controller-baseUpgrade automation-eda-controller-base-servicesUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3-sqlparseUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-galaxy-ngUpgrade automation-eda-controllerUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade automation-controllerUpgrade python3.12-django-ansible-base+activitystreamUpgrade python3.12-django-ansible-base+authenticationUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-gitpythonUpgrade python3.12-django-ansible-base+rest_filtersUpgrade automation-gateway-configUpgrade python3.12-django-ansible-base+resource_registryUpgrade receptorctlUpgrade automation-controller-serverUpgrade automation-controller-venv-towerUpgrade python3.12-django-ansible-base+feature_flagsUpgrade receptorUpgrade automation-eda-controller-worker-servicesUpgrade python3.12-django-ansible-baseUpgrade automation-gateway-serverUpgrade aap-metrics-utilityUpgrade automation-platform-uiUpgrade python3.12-django-ansible-base+api_documentationUpgrade receptor-debugsourceUpgrade automation-controller-cliUpgrade automation-hubUpgrade python3.12-django-ansible-base+redis_clientUpgrade automation-eda-controller-event-stream-servicesUpgrade automation-gateway-proxy-server-debuginfo | Sep 25, 2026 | Sep 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub