{"id":"CVE-2026-19391","aliases":[],"cve":{"records":[{"id":"CVE-2026-19391","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-10T03:40:39.898Z","published":"2026-08-11T06:25:22.370Z","modified":"2026-11-05T19:26:16.752Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-05T19:26:16.752Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-11T13:23:45.771Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-19391","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513020","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-312","description":"Cleartext Storage of Sensitive Information","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-11T13:23:26.982590Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.","score":6.5,"severity":"medium","published":"2026-08-11T06:25:22.370Z","modified":"2026-11-05T19:26:16.752Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Pen Drive Powered by Red Hat Lightspeed","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:pdrive_lightspeed:0"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Pen Drive Powered by Red Hat Lightspeed","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:pdrive_lightspeed:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Certification Program for Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:certifications:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Certification Program for Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:certifications:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Satellite 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:satellite:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Satellite 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:satellite:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Satellite 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:satellite:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"},{"vendor":"Red Hat","name":"Red Hat Satellite 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:satellite:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"}],"remediation":[{"text":"Exclude sssd_config, sssd_conf_d, and cib_xml via /etc/insights-client/file-redaction.yaml, or add keyword/pattern redaction covering ldap_default_authtok and fence passwd/password XML forms, until a patched insights-core is available.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"}],"references":["https://access.redhat.com/security/cve/CVE-2026-19391","https://bugzilla.redhat.com/show_bug.cgi?id=2513020"],"sources":[{"name":"CVE","id":"CVE-2026-19391","modified":"2026-11-05T19:26:16.752Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-05T19:38:57.954Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:35:33.315Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T19:45:38.782Z","attemptedAt":"2026-11-05T19:45:38.782Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T19:45:38.983Z","attemptedAt":"2026-11-05T19:45:38.983Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-05T19:45:39.296Z","attemptedAt":"2026-11-05T19:45:39.296Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-05T19:45:37.901Z","attemptedAt":"2026-11-05T19:45:37.901Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-19391","url":"https://www.first.org/epss/","probability":0.00243,"percentile":0.15594,"date":"2026-11-05","checkedAt":"2026-11-05T19:45:37.901Z"},{"source":"NVD","id":"CVE-2026-19391","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19391","modified":"2026-08-14T19:07:46.080","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T19:45:38.782Z"},{"source":"GitHub Advisory Database","id":"GHSA-2pq5-gq5q-3g2p","url":"https://github.com/advisories/GHSA-2pq5-gq5q-3g2p","modified":"2026-08-11T09:32:34Z","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T19:45:38.983Z"},{"source":"ENISA EUVD","id":"EUVD-2026-55951","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55951","modified":"Aug 11, 2026, 1:23:45 PM","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-05T19:45:39.296Z"}],"aiSummary":{"text":"A flaw in insights-core exposes SSSD LDAP bind passwords and Pacemaker fence credentials in uploaded archives due to incomplete credential redaction. The weakness is cleartext storage of sensitive information. Affected products include Red Hat Enterprise Linux 9 and 10.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T19:41:08.498Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-19391"}]}}