Sensitive Password Exposure in oVirt Metrics by Red Hat

CVE-2019-10194

Summary

The oVirt Metrics component by Red Hat has been identified with a vulnerability where sensitive passwords, utilized for deployment and configuration, are inadequately safeguarded. This weakness allows for the potential disclosure of passwords in log files when specific playbooks are executed with verbose flags, as well as in playbooks stored on Metrics or Bastion hosts. Such exposure can pose serious security risks, as it may allow unauthorized access to critical systems.

References