Ovirt: >> Ovirt-Engine >> 4.4.1.1 Security Vulnerabilities
A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.
CVSS Score
4.4
EPSS Score
0.001
Published
2024-09-26
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
CVSS Score
6.5
EPSS Score
0.003
Published
2020-12-21