Red Hat Security Advisory

RHSA-2017:0257

ovirt-engine-extension-aaa-jdbc security update

Released 2017-02-06 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV-M 4.0 ovirt-engine-extension-aaa-jdbc-1.1.3-1.el7ev

Fixes 1 record

TI-2017-01865 CVE-2017-2614 · GHSA-w5vv-xfcc-x3jc

Improper input validation in Red Hat ovirt-engine-extension-aaa-jdbc

LOW 30

When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired.

CVSS 3.0MEDIUM 6.8 Local No auth No interaction EPSS 0.0028 Published 2018-07-27 Fixed CWE-20