CVE-2017-15113 HIGH

CVE-2017-15113

Vendor Red Hat
Product ovirt-engine
Weakness CWE-212
Published July 27, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues.

Key dates

02Disclosure timeline

July 27, 2018 CVE published
August 5, 2024 Record updated