Threats Tagged 'ghsa-89mc-x55w-mqvp'

CVE-2026-71459 is a medium severity vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8 where a specific view (JobJobEventsChildrenSummary) lacks proper authorization checks. This allows any authenticated user, including those with zero privileges, to read event tree structures, event processing status, and enumerate job IDs across the platform. The vulnerability arises because the view does not implement object-level permission checks and improperly falls through permission validation. A related endpoint correctly enforces access controls. A security advisory from Red Hat is available with further details.