CVE-2016-6341: Exposure of Sensitive Information to an Unauthorized Actor

oVirt Engine before 4.0.3 does not include DWHDBPASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files...