Skip to content
Sign in
5.3 Medium

CVE-2018-1073 The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and…

Description

The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.

Affected products and versions

Product Affected versions Fixed in
ovirt-engine Versions not published

Other CVEs of ovirt-engine

The 2 CVEs of ovirt-engine →
CVE-2018-1075 ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning 5.0 Medium
Track this CVE