CVE-2026-71460

The Red Hat Ansible Automation Platform (specifically the automation-controller component) is vulnerable to unrestricted subscription and license information disclosure. The /api/v2/config/ endpoint is insufficiently protected by only requiring IsAuthenticated status. Consequently, any authentica...

PT-2026-97494

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An improper access control issue exists in the '/api/v2/config/' endpoint, which is protected only by the IsAuthenticated permission. This allows any authenticat...

CVE-2022-31066

EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...

CVE-2019-14890

A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config' when applying the Ansible Tower license...

PT-2019-4198

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.6.1 Description A vulnerability allows an attacker with low privilege to retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database. This issue is related to the...