CVE-2019-14886: Red Hat Decision Manager

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed.

Affected products

  • Red Hat Decision Manager: version 7.5.1 only
  • Red Hat Process Automation Manager: version 7.5.1 only

Published 2020-03-05. Last modified 2026-06-17.