Redhat: >> Enterprise Virtualization >> 3.6 Security Vulnerabilities
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
CVSS Score
5.5
EPSS Score
0.001
Published
2017-08-22
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
CVSS Score
5.5
EPSS Score
0.0
Published
2016-12-14