Red Hat Security Advisory

RHSA-2018:1452

ovirt-ansible-roles security update

Released 2018-05-15 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Virtualization Manager 4.1 ovirt-ansible-roles-1.0.6-1.el7ev

Fixes 1 record

TI-2018-01035 CVE-2018-1117 · GHSA-xghx-gh8p-84h2

Sensitive information in log files in [UNKNOWN] ovirt-ansible-roles

MEDIUM 45

ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin passwords in the provis…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01356 Published 2018-06-19 Fixed CWE-532