Power Management Credentials Exposure in ovirt-engine by Red Hat

CVE-2018-1074

What is CVE-2018-1074?

The ovirt-engine, an open-source virtualization management platform from Red Hat, is susceptible to a security flaw that exposes Power Management credentials. Prior to versions 4.2.2.5 and 4.1.11.2, sensitive information, including cleartext passwords for Host Administrators, can be accessed. This vulnerability allows a Host Administrator to manipulate the power management systems of their controlled hosts, leading to potential unauthorized actions within the virtual environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References