ovirt-engine 信息泄露漏洞

ovirt-engine is an open source virtualization management engine. An information disclosure vulnerability exists in ovirt-engine that stems from recording plaintext passwords in log files when using otapi style. An attacker could exploit this vulnerability to read the log file, which could result ...

CVE-2022-2805

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss...

CVE-2022-2805: Cleartext Storage of Sensitive Information

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss...

CVE-2022-2805

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss...

The vulnerability of the ovirt-engine manager, a tool for managing virtual infrastructure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the ovirt-engine manager, a tool for managing virtual infrastructure, is related to the lack of protection for the web page structure during the processing of the errordescription parameter. Exploiting this vulnerability allows an attacker operating remotely to perform...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

Cross site scripting

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

CVE-2022-3193 – ovirt-engine exposes a HTML injection/reflected XSS flaw caused by insufficient sanitization of the parameter “error_description.” Vulnerable component: ovirt-engine web UI. Trigger: when the entry on the Windows Service Accounts home pages is processed, an attacker could cause re...

CVE-2022-3193: Improper Neutralization of Input During Web Page Generation

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

CVE-2022-3193

An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...

ovirt-engine 跨站脚本漏洞

ovirt-engine is an open source virtualization management engine. A security vulnerability exists in ovirt-engine, which stems from the parameter "errordescription" that fails to clear certain entries, resulting in the injection of reflective cross-site scripting on the home page of a Windows...

PT-2022-4900 · Ovirt · Ovirt Engine

Name of the Vulnerable Software and Affected Versions: ovirt-engine affected versions not specified Description: The issue is related to the ovirt-engine management tool for virtual infrastructure, which fails to protect its web page structure when handling the error description parameter. This...

RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.2] (RHSA-2022:6393)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6393 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

CVE-2022-2805

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss...

RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.1] (RHSA-2022:5555)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5555 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

RHEL 8 : RHV Manager (ovirt-engine) [ovirt-4.5.0] (RHSA-2022:4711)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4711 advisory. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to...

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...