CVE-2016-6341

2017-04-2017:59:00

Google

osv.dev

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

CPENameOperatorVersion
ovirt-engineeqovirt-engine-3.6.0_beta1
ovirt-engineeqovirt-engine-3.6.0_beta1.1
ovirt-engineeqovirt-engine-3.6.0_alpha2
ovirt-engineeqovirt-engine-3.6.0_alpha1.2
ovirt-engineeqovirt-engine-3.5.0_alpha1.1
ovirt-engineeqovirt-engine-3.6.0_qa4
ovirt-engineeqovirt-engine-3.6.0_alpha3
ovirt-engineeqovirt-engine-4.0.0.5
ovirt-engineeqovirt-engine-4.0.0.4
ovirt-engineeqovirt-engine-4.0.0_beta1

Name	Operator	Version
ovirt-engine	eq	ovirt-engine-3.6.0_beta1
ovirt-engine	eq	ovirt-engine-3.6.0_beta1.1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha2
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1.2
ovirt-engine	eq	ovirt-engine-3.5.0_alpha1.1
ovirt-engine	eq	ovirt-engine-3.6.0_qa4
ovirt-engine	eq	ovirt-engine-3.6.0_alpha3
ovirt-engine	eq	ovirt-engine-4.0.0.5
ovirt-engine	eq	ovirt-engine-4.0.0.4
ovirt-engine	eq	ovirt-engine-4.0.0_beta1