The vulnerability exists in the aap-gateway component of Red Hat Ansible Automation Platform's Event-Driven Ansible (EDA). An attacker can bypass mutual TLS authentication by manipulating the event stream URL and forging the HTTP Subject header. Additionally, error messages disclose the expected certificate subject, facilitating targeted attacks. This allows injection of arbitrary events into EDA event streams, which may trigger automated workflows without authentication. The flaw is due to improper certificate validation and authentication bypass in the aap-gateway configuration.

An unauthenticated remote attacker can bypass mutual TLS authentication and inject arbitrary events into the EDA event streams. This can lead to unauthorized triggering of automated workflows, potentially causing unintended actions within the automation platform. Confidentiality impact is low, integrity impact is high, and availability is not affected according to the CVSS score. The vulnerability could allow attackers to assume identity and bypass protection mechanisms in the affected component.

Red Hat has not explicitly stated that a patch is available for this vulnerability in the provided advisory content. The recommended mitigation is to restrict network access to the EDA event stream endpoints at the firewall or load balancer level, ensuring only trusted sources can reach these ports. Additionally, monitoring EDA event logs for unexpected events from unverified sources is advised. Check Red Hat's official advisory and errata for updates on patches or fixes and apply them when available.