Red Hat Security AdvisoryRHSA-2019:2433
cockpit-ovirt security, bug fix, and enhancement update
Released 2019-08-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) cockpit-ovirt-0.13.5-1.el7ev, cockpit-ovirt-dashboard-0.13.5-1.el7ev
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts cockpit-ovirt-0.13.5-1.el7ev, cockpit-ovirt-dashboard-0.13.5-1.el7ev
Fixes 1 record
Priority LOW 34
During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var` which contains the admin and the appliance passwords as plain…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2019-05-17 · Fixed CWE-522
