VulnerableCode Package Details - pkg:gem/katello@3.9.1

Search for packages

Vulnerability	Summary	Fixed by
VCID-asqu-5r9h-9yav Aliases: CVE-2018-14623 GHSA-jx5v-788g-qw58	SQL Injection An SQL injection was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072.	3.10.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-bsbd-bsbq-7qdk Aliases: CVE-2019-14825 GHSA-m4wh-848j-9w2r	Katello cleartext password storage issue A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.	3.12.2 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-asqu-5r9h-9yav
Aliases:
CVE-2018-14623
GHSA-jx5v-788g-qw58

SQL Injection An SQL injection was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072.

3.10.1
Affected by 1 other vulnerability.

VCID-bsbd-bsbq-7qdk
Aliases:
CVE-2019-14825
GHSA-m4wh-848j-9w2r

Katello cleartext password storage issue A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users.

3.12.2
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-11T23:11:54.888194+00:00	GitLab Importer	Affected by	VCID-bsbd-bsbq-7qdk	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2019-14825.yml	38.3.0
2026-04-11T22:01:14.424259+00:00	GitLab Importer	Affected by	VCID-asqu-5r9h-9yav	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2018-14623.yml	38.3.0
2026-04-02T23:20:19.254718+00:00	GitLab Importer	Affected by	VCID-bsbd-bsbq-7qdk	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2019-14825.yml	38.1.0
2026-04-02T22:14:17.625643+00:00	GitLab Importer	Affected by	VCID-asqu-5r9h-9yav	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2018-14623.yml	38.1.0
2026-04-01T17:40:54.309544+00:00	GitLab Importer	Affected by	VCID-bsbd-bsbq-7qdk	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2019-14825.yml	38.0.0
2026-04-01T16:31:46.560763+00:00	GitLab Importer	Affected by	VCID-asqu-5r9h-9yav	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/katello/CVE-2018-14623.yml	38.0.0