VULNERABILITY INTELLIGENCE

CVE-2019-10194

CVSS score5.5 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2019-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references