CVE-2019-14886: Medium severity redhat decision manager vulnerability
A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in erraisecuritycontext. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed.
Other sources
External References:
https://groups.google.com/forum/?utmmedium=email&utmsource=footer#!msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14886?
The severity of CVE-2019-14886 is medium with a severity value of 6.5.
How does CVE-2019-14886 affect Red Hat Decision Manager and Red Hat Process Automation Manager?
CVE-2019-14886 affects Red Hat Decision Manager version 7.5.1 and Red Hat Process Automation Manager version 7.5.1.
How are the passwords stored in business-central related to CVE-2019-14886?
The passwords stored in business-central are encoded using Base64 and are vulnerable due to CVE-2019-14886.
What is the CWE ID for CVE-2019-14886?
The CWE ID for CVE-2019-14886 is 312.
Where can I find more information about CVE-2019-14886?
More information about CVE-2019-14886 can be found at the following references: [Google Groups Forum](https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ), [Red Hat Security Advisory RHSA-2020:0132](https://access.redhat.com/errata/RHSA-2020:0132), [Red Hat Security Advisory RHSA-2020:0133](https://access.redhat.com/errata/RHSA-2020:0133).