6.5
Medium
CVE-2022-2805 A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using…
Description
A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ovirt-engine | Versions not published |
Other CVEs of ovirt-engine
The 4 CVEs of ovirt-engine →
CVE-2022-3193
An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine
6.1
Medium
CVE-2020-35497
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal…
Not rated
CVE-2020-10775
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to…
Not rated