CVE-2019-10194

5.9MEDIUM

Key Information:

Vendor
Red Hat
Status
Ovirt-engine-metrics
Vendor
CVE Published:
11 July 2019

Summary

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

Affected Version(s)

ovirt-engine-metrics all versions

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194
x_refsource_CONFIRM
http://www.securityfocus.com/bid/109140
vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:2499
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.