CVE-2026-19391
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives
A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Pen Drive Powered by Red Hat Lightspeed
- Vendor
- Red Hat
- Product
- Pen Drive Powered by Red Hat Lightspeed
- Platforms
- Unknown
- Default status
affected- Package
- pen-drive/pen-drive-scanner-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Pen Drive Powered by Red Hat Lightspeed
- Vendor
- Red Hat
- Product
- Pen Drive Powered by Red Hat Lightspeed
- Platforms
- Unknown
- Default status
affected- Package
- pen-drive/pen-drive-scanner-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Certification Program for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Certification Program for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- rhcertification/redhat-certification-cloud-10
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Certification Program for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Certification Program for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- rhcertification/redhat-certification-cloud-9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- insights-core
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- rhel10-eus/rhel-10.2-bootc
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- rhel10/rhel-bootc
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- insights-core
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6
- Vendor
- Red Hat
- Product
- Red Hat Satellite 6
- Platforms
- Unknown
- Default status
unaffected- Package
- satellite/iop-advisor-engine-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6
- Vendor
- Red Hat
- Product
- Red Hat Satellite 6
- Platforms
- Unknown
- Default status
unaffected- Package
- satellite/iop-insights-engine-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6
- Vendor
- Red Hat
- Product
- Red Hat Satellite 6
- Platforms
- Unknown
- Default status
unaffected- Package
- satellite/iop-puptoo-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6
- Vendor
- Red Hat
- Product
- Red Hat Satellite 6
- Platforms
- Unknown
- Default status
unaffected- Package
- satellite/iop-yuptoo-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.