CVE-2026-19391: Red Hat Pen Drive Powered by Red Hat Lightspeed

Описание

Оригинално описание

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.

Засегнати продукти

• Red Hat Pen Drive Powered by Red Hat Lightspeed
• Red Hat Pen Drive Powered by Red Hat Lightspeed
• Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
• Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Satellite 6
• Red Hat Red Hat Satellite 6
• Red Hat Red Hat Satellite 6
• Red Hat Red Hat Satellite 6

Вид слабост

• CWE-312 Съхранение на чувствителна информация в открит текст

История

Други уязвимости в Red Hat Pen Drive Powered by Red Hat Lightspeed

• 6.5CVE-2026-121259
• 6.5CVE-2026-119843
• 5.3CVE-2026-120971
• 6.5CVE-2026-120831
• 7.4CVE-2026-120830

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-19391
• https://nvd.nist.gov/vuln/detail/CVE-2026-19391
• https://access.redhat.com/security/cve/CVE-2026-19391
• https://bugzilla.redhat.com/show_bug.cgi?id=2513020