Beveiligingsadvies

CVE-2026-68563

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-30 21:13:08
Laatst bijgewerkt 2026-07-31 19:21:38
Toegewezen door redhat
CVSS-score 5.5
Status PUBLISHED

Beschrijving

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read sensitive archived PostgreSQL data, leading to information disclosure.