Description
A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Pen Drive Powered by Red Hat Lightspeed
Default version status: affected
Red Hat Pen Drive Powered by Red Hat Lightspeed
Default version status: affected
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat Satellite 6
Default version status: unaffected
Red Hat Red Hat Satellite 6
Default version status: unaffected
Red Hat Red Hat Satellite 6
Default version status: unaffected
Red Hat Red Hat Satellite 6
Default version status: unaffected