Ovirt Ansible Roles

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1117 Jun 20, 01:29 CRITICAL Act Now

ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Red Hat Enterprise Virtualization Ovirt Ovirt Ansible Roles

NVD

CVSS 3.0

9.8

EPSS

1.4%

CVE-2018-1117

EPSS 1% CVSS 9.8

CRITICAL Act Now

ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Red Hat Enterprise Virtualization +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy