En resumen
- CVE-2019-14825 es una vulnerabilidad BAJO (CVSS 2.7) que afecta a katello, katello (theforeman).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.3% de las vulnerabilidades.
- Solución: actualizar a 3.12.2, 3.12.0.9 o posterior.
| Package | Affected versions | Patched versions |
|---|
| katello RubyGems | ≥ 3.0.0.0, < 3.12.2
| 3.12.2
|
| katello | ≥ 3.0.0.0, < 3.12.0.9
| 3.12.0.9
|
Description
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
NVD description
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free