Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
CPE | Name | Operator | Version |
---|---|---|---|
virtualization_manager | eq | 4.3 |