Release Notes SaaS - Patch 2 HF3

Resolved a broken access control issue in the acctmgmt-fetch-user-byfilter API. Users with only Workflow permissions could previously retrieve all user details through this API due to overly permissive use case mappings. The API now enforces the required platform permission, restricting user data access to authorized users only.

Resolved an issue where the platform-update-credentials and platform-appsetting-authentication-ldap-update APIs lost their configuration after a gateway restart. These APIs, used in credential update workflows for service accounts and LDAP accounts, are now permanently configured and retained across gateway restarts, eliminating the need for manual intervention to restore functionality after each restart.

Resolved an intermittent issue where Tenable.io Certificate Discovery failed when a QTH tag was configured. The integration displayed an "Invalid URL" validation error even though the configured URL was valid, and the export process subsequently timed out with "Export status did not complete after 100 retry attempts." The Tenable.io asset export process now completes successfully without intermittent URL validation failures or export timeouts.