CVE-2024-7259 — Ovirt-engine: potential exposure of cleartext provider passwords via web ui
A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider p…
Published: 2024-09-26 · CVSS: 4.9 · CVSS 3.1
A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7