Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmxf-r2wh-hqpc

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.

EPSS

Процентиль: 48%
0.00249
Низкий

7.2 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 7.7
redhat
почти 8 лет назад

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.

CVSS3: 7.7
nvd
почти 8 лет назад

ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.

EPSS

Процентиль: 48%
0.00249
Низкий

7.2 High

CVSS3

Дефекты

CWE-522