Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcfm-vxjm-7w5h

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

EPSS

Процентиль: 20%
0.00065
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.9
redhat
больше 9 лет назад

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

CVSS3: 5.5
nvd
почти 9 лет назад

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

EPSS

Процентиль: 20%
0.00065
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200