CVE-2019-10194
- State
- Published
- Severity
- 5.9 Medium
- Published
- Jul 11, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 27, 2019
Description
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.9 Medium | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
ovirt-engine-metricsRed Hat |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194
- 109140vdb-entry
- RHSA-2019:2499vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.