CVE-2019-10194

2019-07-1119:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.7%

JSON

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

CPENameOperatorVersion
ovirt-engineeqovirt-engine-4.3.0_rc2
ovirt-engineeqovirt-engine-3.6.0_alpha1
ovirt-engineeqovirt-engine-3.6.0_alpha2
ovirt-engineeqovirt-engine-4.3.0_alpha2
ovirt-engineeqovirt-engine-3.5.0_alpha1
ovirt-engineeqovirt-engine-4.3.0_rc
ovirt-engineeqovirt-engine-3.6.0_beta1.1
ovirt-engineeqovirt-engine-3.5.0_alpha2
ovirt-engineeqovirt-engine-3.6.0_qa1
ovirt-engineeqovirt-engine-3.6.0_alpha3

Name	Operator	Version
ovirt-engine	eq	ovirt-engine-4.3.0_rc2
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha2
ovirt-engine	eq	ovirt-engine-4.3.0_alpha2
ovirt-engine	eq	ovirt-engine-3.5.0_alpha1
ovirt-engine	eq	ovirt-engine-4.3.0_rc
ovirt-engine	eq	ovirt-engine-3.6.0_beta1.1
ovirt-engine	eq	ovirt-engine-3.5.0_alpha2
ovirt-engine	eq	ovirt-engine-3.6.0_qa1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha3