CVE-2019-10194
Medium
Description
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Ovirt
PublishedJul 11, 2019
First seenJul 11, 2019
Weakness typeCWE-532CWE-532
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ovirt ovirt | No range specified | — |
| redhat virtualization_manager | 4.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.