Kurz gesagt
- CVE-2019-14825 ist eine Schwachstelle (NIEDRIG (CVSS 2.7)) in katello, katello (theforeman).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.65%, höher als bei 51.3% aller Schwachstellen.
- Abhilfe: auf 3.12.2, 3.12.0.9 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| katello RubyGems | ≥ 3.0.0.0, < 3.12.2
| 3.12.2
|
| katello | ≥ 3.0.0.0, < 3.12.0.9
| 3.12.0.9
|
Description
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
NVD description
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free