Power Management Credentials Exposure in ovirt-engine by Red Hat

CVE-2018-1074

What is CVE-2018-1074?

The ovirt-engine, an open-source virtualization management platform from Red Hat, is susceptible to a security flaw that exposes Power Management credentials. Prior to versions 4.2.2.5 and 4.1.11.2, sensitive information, including cleartext passwords for Host Administrators, can be accessed. This vulnerability allows a Host Administrator to manipulate the power management systems of their controlled hosts, leading to potential unauthorized actions within the virtual environment.

References