8 matches found
CVE-2026-126642
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
CVE-2026-126642
An authorization flaw in AWX (Red Hat Ansible Automation Platform) allows a user to attach a webhook token credential —such as a GitLab token—that they do not have permission to use. The root cause is located in awx/main/access.py, where the JobTemplateAccess and WorkflowJobTemplateAccess classes...
CVE-2026-126642 Awx: webhook credential assignment omits use_role check, exposing another user's token
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
EUVD-2026-124330
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
CVE-2026-126642
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
CVE-2026-126642: Red Hat Red Hat Ansible Automation Platform 2: An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation…
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
UBUNTU-CVE-2026-126642
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...
CVE-2026-126642
An incorrect authorization flaw was found in AWX, the automation controller component of Red Hat Ansible Automation Platform. The API access classes for JobTemplate and WorkflowJobTemplate do not check the caller's Credential userole when assigning the single-valued webhookcredential foreign key:...