Back to search
CVE-2019-10194
Published: Jul 11, 2019
Modified: Aug 4, 2024
PUBLISHED
CVSS v3.0
5.9
MEDIUM
Description
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
| Vendor | Product | Versions |
|---|---|---|
Red Hat | ovirt-engine-metrics | affected all versions |
Weaknesses (CWE)
CVSS v3.0 Details
CVSS v3.0 Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194
x_refsource_CONFIRM
109140
vdb-entry
x_refsource_BID
RHSA-2019:2499
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now