Back

LOW

katello: registry credentials are captured in plain text during repository discovery

Published Nov 25, 2019

Description

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (16)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 25, 2019
Updated Aug 5, 2024
Reserved Aug 10, 2019
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Low
Public date Aug 9, 2019
ENISA EUVD
Assigner redhat
Published Nov 25, 2019
Updated Aug 5, 2024
Exploited since n/a
EUVD-2022-4490 GHSA-M4WH-848J-9W2R