Threats affecting pkg:rpm/redhat/ansible-automation-platform-automation-controller

A vulnerability in the Ansible Automation Platform automation-controller allows unauthorized users to infer secret values marked with no_log by exploiting a database column used in REST API filtering. This flaw involves the WorkflowJobNode.ancestor_artifacts column, which is not properly protected from arbitrary field lookups, enabling a boolean/count oracle attack to recover sensitive data across organizations.