Katello cleartext password storage issue
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-14825US | low2.7OT erhöht | — | ||
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertentl… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2019:3172WEB
- https://access.redhat.com/security/cve/CVE-2019-14825WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1730668WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1739485WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14825WEB
- https://github.com/Katello/katelloPACKAGE
- https://github.com/Katello/katello/commit/332484232b66b7907a8104a19ea97eb697b75c79WEB
- https://github.com/Katello/katello/commit/4eefa678a905140620ca8b390d48fe318d36e4eaWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan