CVE-2019-10194 Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with...
MediumCVSS 5.5
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ovirt | All versions | No fix listed |
| redhat virtualization manager | = 4.3 | No fix listed |
| redhat ovirt-engine-metrics | = all versions | No fix listed |
References
- 109140 broken-link third-party-advisory vdb-entry
- RHSA-2019:2499 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking vendor-advisory