EUVD-2016-6376

Malware in sbrugna...

EUVD-2018-11727

Malware in sbrugna...

RHEL 7 : ovirt-engine (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ovirt-engine: webadmin log out must logout all sessions CVE-2016-6338 - ovirt-engine: API exposes power...

ovirt-engine: Unfiltered password when choosing manual db provisioning

A flaw was found in ovirt-engine. When engine-setup was run and one chooses to provision the database manually or connect to a remote database, the password input was logged in cleartext during the verification step. Sharing the provisioning log might inadvertently leak database passwords...

Default credentials

ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engine-setup was run and one chooses to provision the database manually or connect to a remote database, the password input was logged in cleartext during the verification step...

CVE-2018-1075

CVE-2018-1075 affects ovirt-engine up to version 4.2.3, where the password entered during manual/provisioning of the database is logged in cleartext during the verification step, potentially leaking the database password via provisioning logs. This is an information-disclosure vulnerability tied ...

PT-2018-10080 · Ovirt · Ovirt Engine

Name of the Vulnerable Software and Affected Versions: ovirt-engine versions up to 4.2.3 Description: The issue concerns an unfiltered password when choosing manual database provisioning. When engine-setup is run and manual database provisioning or connection to a remote database is chosen, the...

PT-2016-6427 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Engine version 4.0 Description: The issue allows local users to obtain sensitive database provisioning information. This is achieved by reading log files, specifically those generated by the...