CVE-2019-14839

Published: Apr 1, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.

Affected (3)

Products: Redhat: Business Central, Descision Manager, Process Automation

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Business Central	Up to 7.48.0
Redhat Descision Manager	Version 7.0
Redhat Process Automation	Version 7.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=1748178

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1748178

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.