/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade python3.12-django-ansible-base+activitystreamUpgrade automation-gateway-proxyUpgrade automation-controller-uiUpgrade python3-sqlparseUpgrade automation-eda-controller-base-servicesUpgrade automation-eda-controller-baseUpgrade python3.12-gitpythonUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-django-ansible-base+channel_authUpgrade automation-gateway-configUpgrade python3.12-galaxy-ngUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade automation-gatewayUpgrade automation-gateway-proxy-serverUpgrade receptor-debuginfoUpgrade automation-gateway-proxy-debugsourceUpgrade python3.12-django-ansible-base+rest_filtersUpgrade python3.12-sqlparseUpgrade automation-eda-controllerUpgrade automation-controllerUpgrade python3.12-django-ansible-base+authenticationUpgrade python3.12-django-ansible-baseUpgrade automation-eda-controller-worker-servicesUpgrade automation-eda-controller-event-stream-servicesUpgrade automation-gateway-serverUpgrade automation-platform-uiUpgrade automation-hubUpgrade aap-metrics-utilityUpgrade automation-gateway-proxy-server-debuginfoUpgrade python3.12-django-ansible-base+redis_clientUpgrade automation-controller-venv-towerUpgrade python3.12-django-ansible-base+resource_registryUpgrade receptorctlUpgrade receptor-debugsourceUpgrade python3.12-django-ansible-base+feature_flagsUpgrade receptorUpgrade automation-controller-serverUpgrade python3.12-django-ansible-base+api_documentationUpgrade automation-controller-cli | Sep 25, 2026 | Sep 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub