Описание
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Virtualization 3 | ovirt-engine | Affected | ||
| Red Hat Gluster Storage 3.1 | org.ovirt.engine-root | Affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-532
https://bugzilla.redhat.com/show_bug.cgi?id=1363738ovirt-engine: ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD disclosed in log file
EPSS
Процентиль: 33%
0.00129
Низкий
4 Medium
CVSS3
2.1 Low
CVSS2
Связанные уязвимости
CVSS3: 5.5
nvd
больше 8 лет назад
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
CVSS3: 5.5
github
больше 3 лет назад
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
EPSS
Процентиль: 33%
0.00129
Низкий
4 Medium
CVSS3
2.1 Low
CVSS2