{"action":"Upgrade katello to 3.12.2 or later.","affected":[{"fixed":"3.12.2","introduced":"3.0.0.0"}],"component":"katello","cve_ids":["CVE-2019-14825"],"ecosystem":"RubyGems","epss":0.00652,"exploited":false,"fixed_versions":["3.12.2"],"ghsa_id":"GHSA-m4wh-848j-9w2r","id":"tcs_01M5KEM4HDXGH503NX74KGSE6X","modified_at":"2023-11-08T04:01:11.075253Z","published_at":"2022-05-24T17:01:59Z","references":["https://osv.dev/vulnerability/GHSA-m4wh-848j-9w2r","https://nvd.nist.gov/vuln/detail/CVE-2019-14825","https://github.com/Katello/katello/pull/8244","https://github.com/Katello/katello/pull/8253","https://github.com/Katello/katello/commit/332484232b66b7907a8104a19ea97eb697b75c79","https://github.com/Katello/katello/commit/4eefa678a905140620ca8b390d48fe318d36e4ea","https://access.redhat.com/errata/RHSA-2019:3172","https://access.redhat.com/security/cve/CVE-2019-14825","https://bugzilla.redhat.com/show_bug.cgi?id=1730668","https://bugzilla.redhat.com/show_bug.cgi?id=1739485","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14825","https://github.com/Katello/katello","https://github.com/Katello/katello/commits/3.12.2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2019-14825.yml","https://projects.theforeman.org/issues/27485"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-m4wh-848j-9w2r","url":"https://osv.dev/vulnerability/GHSA-m4wh-848j-9w2r"}],"summary":"Katello cleartext password storage issue"}