CVE-2024-7259 — Ovirt-engine: potential exposure of cleartext provider passwords via web ui

CVE-2024-7259

Ovirt-engine: potential exposure of cleartext provider passwords via web ui PUBLISHED

Description (CNA)

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 4.5.7
Red Hat / Red Hat Virtualization 4	affected

CWE

CWE-312

References

https://access.redhat.com/security/cve/CVE-2024-7259
https://bugzilla.redhat.com/show_bug.cgi?id=2314229

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.