EUVD-2018-1781

Malware in sbrugna...

RHEL 8 : ovirt-hosted-engine-setup (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ovirt-hosted-engine-setup: root password exposed in log file CVE-2018-1000018 Note that Nessus has not tested for...

ovirt-hosted-engine-setup information disclosure vulnerability

ovirt-hosted-engine-setup is a web hosting engine installation tool. An information disclosure vulnerability exists in versions of ovirt-hosted-engine-setup prior to 2.2.7. An attacker can exploit this vulnerability to obtain the root user password in a log file...

Information disclosure

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

CVE-2018-1000018 affects ovirt-hosted-engine-setup prior to version 2.2.7, exposing the root password in the setup log file. The connected sources corroborate an information disclosure vulnerability in that component/version, with multiple feeds (NVD, CNVD, Red Hat context) noting root-password e...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...