CVE-2019-14825
1 advisory.
RubyGems/katello CVE-2019-14825: low 2.7, EPSS 0.65%
Katello cleartext password storage issue
Action: Upgrade katello to 3.12.2 or later.
bundle update katelloAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0.0 | 3.12.2 | - |
Fixed versions
| 3.12.2 |
Sources
- osv: GHSA-m4wh-848j-9w2r
- https://nvd.nist.gov/vuln/detail/CVE-2019-14825
- https://github.com/Katello/katello/pull/8244
- https://github.com/Katello/katello/pull/8253
- https://github.com/Katello/katello/commit/332484232b66b7907a8104a19ea97eb697b75c79
- https://github.com/Katello/katello/commit/4eefa678a905140620ca8b390d48fe318d36e4ea
- https://access.redhat.com/errata/RHSA-2019:3172
- https://access.redhat.com/security/cve/CVE-2019-14825
- https://bugzilla.redhat.com/show_bug.cgi?id=1730668
- https://bugzilla.redhat.com/show_bug.cgi?id=1739485
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14825
- https://github.com/Katello/katello
- https://github.com/Katello/katello/commits/3.12.2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2019-14825.yml
- https://projects.theforeman.org/issues/27485
CVE-2019-14825 · published · modified · JSON