CVE-2018-1117
20.06.2018, 01:29
ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin passwords in the provisioning log. In an environment where logs are shared with other parties, this could lead to privilege escalation.Enginsight
Vendor | Product | Version |
---|---|---|
ovirt | ovirt-ansible-roles | 𝑥 < 1.0.6 |
redhat | enterprise_virtualization | 4.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration