Red Hat Security Advisory

RHSA-2018:2071

Red Hat Virtualization Manager security, bug fix, and enhancement update

Released 2018-06-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHV-M 4.2 ovirt-engine-4.2.4.5-0.1.el7_3, ovirt-engine-backend-4.2.4.5-0.1.el7_3, ovirt-engine-dbscripts-4.2.4.5-0.1.el7_3 +17

TI-2018-00992 CVE-2018-1072 · GHSA-9fw7-mcq9-ghf3

MEDIUM 44

ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00979 Published 2018-06-26 Fixed CWE-532

TI-2018-00995 CVE-2018-1075 · GHSA-2874-9wc2-224f

LOW 34

ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00348 Published 2018-06-12 Fixed CWE-532