GitHub Advisoryadvisory · RubyGems

GHSA-m4wh-848j-9w2r Katello cleartext password storage issue

LOW Published 2022-05-24 Modified 2022-10-07 Official page ↗
Aliases
CVE-2019-14825
Ecosystem
RubyGems
Packages
katello
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-312
Reviewed
2022-10-07

Affected packages

• RubyGems katello: >= 3.0.0.0, < 3.12.2 → fixed in 3.12.2

Description

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.

Related

Alias · CVE (1)

  • CVE-2019-14825 A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. vulnerability

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References