RHEL 7 : Virtualization Manager (RHSA-2018:2071)

An update for org.ovirt.engine-root is now available for Red Hat Virtualization Manager 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2018-1075

ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engine-setup was run and one chooses to provision the database manually or connect to a remote database, the password input was logged in cleartext during the verification step...

CVE-2018-1075

CVE-2018-1075 affects ovirt-engine up to version 4.2.3, where the password entered during manual/provisioning of the database is logged in cleartext during the verification step, potentially leaking the database password via provisioning logs. This is an information-disclosure vulnerability tied ...