NetSight
high8.8

CVE-2017-7510

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.

Impact

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.

Affected products

VendorProductAffected versions
RedhatOvirt-Engine
Version 4.1.0

Weakness classification

References