Red Hat Certification Program For Red Hat Enterprise Linux 9
Monthly
Cleartext credential exposure in Red Hat insights-core allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included unredacted in diagnostic archives uploaded to console.redhat.com. The redaction layer uses a naive string-match on the literal key name 'password', leaving non-standard credential field names - such as those used by SSSD and Pacemaker - completely unprotected before archive upload. With CVSS PR:L, a threat actor with authenticated access to an organization's Red Hat Insights console can retrieve these cleartext credentials from stored archives. No public exploit identified at time of analysis and not confirmed in CISA KEV.
Cleartext credential exposure in Red Hat insights-core allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included unredacted in diagnostic archives uploaded to console.redhat.com. The redaction layer uses a naive string-match on the literal key name 'password', leaving non-standard credential field names - such as those used by SSSD and Pacemaker - completely unprotected before archive upload. With CVSS PR:L, a threat actor with authenticated access to an organization's Red Hat Insights console can retrieve these cleartext credentials from stored archives. No public exploit identified at time of analysis and not confirmed in CISA KEV.