Vulnerability Details CVE-2019-14825
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.8%
CVSS Severity
CVSS v3 Score 4.1
CVSS v2 Score 4.0
References
Products affected by CVE-2019-14825
-
cpe:2.3:a:theforeman:katello:3.0.0.0
-
cpe:2.3:a:theforeman:katello:3.0.1
-
cpe:2.3:a:theforeman:katello:3.0.2
-
cpe:2.3:a:theforeman:katello:3.1.0
-
cpe:2.3:a:theforeman:katello:3.1.0.1
-
cpe:2.3:a:theforeman:katello:3.10.0
-
cpe:2.3:a:theforeman:katello:3.11.0
-
cpe:2.3:a:theforeman:katello:3.12.0
-
cpe:2.3:a:theforeman:katello:3.2.0
-
cpe:2.3:a:theforeman:katello:3.2.1
-
cpe:2.3:a:theforeman:katello:3.3.0
-
cpe:2.3:a:theforeman:katello:3.3.0.1
-
cpe:2.3:a:theforeman:katello:3.3.1
-
cpe:2.3:a:theforeman:katello:3.3.1.1
-
cpe:2.3:a:theforeman:katello:3.3.2
-
cpe:2.3:a:theforeman:katello:3.4.0
-
cpe:2.3:a:theforeman:katello:3.4.0.1
-
cpe:2.3:a:theforeman:katello:3.4.0.2
-
cpe:2.3:a:theforeman:katello:3.4.1
-
cpe:2.3:a:theforeman:katello:3.4.2
-
cpe:2.3:a:theforeman:katello:3.4.4
-
cpe:2.3:a:theforeman:katello:3.4.5
-
cpe:2.3:a:theforeman:katello:3.5.0
-
cpe:2.3:a:theforeman:katello:3.5.0.1
-
cpe:2.3:a:theforeman:katello:3.5.1
-
cpe:2.3:a:theforeman:katello:3.5.1.1
-
cpe:2.3:a:theforeman:katello:3.5.2
-
cpe:2.3:a:theforeman:katello:3.6.0
-
cpe:2.3:a:theforeman:katello:3.6.0.1
-
cpe:2.3:a:theforeman:katello:3.7.0
-
cpe:2.3:a:theforeman:katello:3.7.1.1
-
cpe:2.3:a:theforeman:katello:3.8.0
-
cpe:2.3:a:theforeman:katello:3.8.1
-
cpe:2.3:a:theforeman:katello:3.9.0
-
cpe:2.3:a:theforeman:katello:3.9.1