CVE-2019-10194CWE-532

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions

Medium · published July 11, 2019

CVSS v3.0
5.9
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2019-07-11T18:33Z
EPSS history
Timeline
  • 11 JUL 18:33Z
    Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions
    cvelistv5