EUVD-2018-1781

Malware in sbrugna...

RHEL 8 : ovirt-hosted-engine-setup (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ovirt-hosted-engine-setup: root password exposed in log file CVE-2018-1000018 Note that Nessus has not tested for...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

Information disclosure

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

CVE-2018-1000018 affects ovirt-hosted-engine-setup prior to version 2.2.7, exposing the root password in the setup log file. The connected sources corroborate an information disclosure vulnerability in that component/version, with multiple feeds (NVD, CNVD, Red Hat context) noting root-password e...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

CVE-2018-1000018

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...

PT-2018-9209

Name of the Vulnerable Software and Affected Versions: ovirt-hosted-engine-setup versions prior to 2.2.7 Description: An information disclosure issue reveals the root user's password in the log file. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the...

CVE-2018-1000018: Insertion of Sensitive Information into Log File

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file...