CVE-2019-14825

—

CVSS 3.1

2.7 low

EPSS

<1%p49

Published

Nov 25, 2019 (Nov 25, 2019)

Modified

Jun 17, 2026

Description

A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.

Vendors: theforeman
Products: katello
Weakness: CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.