Description (CNA)
ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options "--provision*db", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| [UNKNOWN] / ovirt-engine-setup | affected oVirt 4.2.2 |
CWE
CWE-532
References
- https://access.redhat.com/errata/RHSA-2018:2071
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1072
ADP enrichment
No English description supplied.