CVE-2016-6341

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password…

published April 20, 2017

CVSS
—
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00347 · 26.9th percentile
Published
2017-04-20T17:00Z
EPSS history
Timeline
  • 20 APR 17:00Z
    oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password…
    cvelistv5