What’s Vulnerable › Vulnerabilities

CVE-2019-14886

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-05 · updated 2026-06-17
• Weakness: CWE-312

Description

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed.

Affected products

• RedHat Decision Manager: 7.5.1
• Red Hat Process Automation Manager 7: 7.5.1

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14886
• https://groups.google.com/forum/?utm_medium=email&utm_source=footer#%21msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14886
• https://groups.google.com/forum/?utm_medium=email&utm_source=footer#%21msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ

Get alerted when CVE-2019-14886 or the next vulnerability affects your stack