Read the docs

oVirt

Records36All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

oVirt records in CISA KEV
TI-2022-00753 Linux Kernel Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2022-04-25

Components

Products in the NVD configurations · select one to filter the records
Ovirt 12 records MEDIUM Ovirt-engine 9 records CRITICAL Vdsm 4 records LOW Node 2 records HIGH Cockpit-ovirt 1 record LOW Log Collector 1 record LOW Mom 1 record LOW Ovirt-ansible-roles 1 record MEDIUM

Records

1 record in Cockpit-ovirt · all components

TI-2019-07462 CVE-2019-10139 · GHSA-35c5-8h9g-6345

Insufficiently protected credentials in oVirt cockpit-ovirt

Priority LOW 34

During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var` which contains the admin and the appliance passwords as plain…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00245 Published 2019-05-17 Fixed CWE-522
Open these records in search →