Beveiligingsadvies

CVE-2026-19391

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-11 06:25:22

Laatst bijgewerkt 2026-08-11 13:23:45

Toegewezen door redhat

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.

← Alle CVE's bekijken Bekijk op cve.org ↗