CVE-2017-7510

2019-03-2518:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

JSON

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.

CPENameOperatorVersion
ovirt-engineeqovirt-engine-3.6.0_alpha1
ovirt-engineeqovirt-engine-3.6.0_alpha2
ovirt-engineeqovirt-engine-3.5.0_alpha1
ovirt-engineeqovirt-engine-3.6.0_beta1.1
ovirt-engineeqovirt-engine-3.5.0_alpha2
ovirt-engineeqovirt-engine-3.6.0_qa1
ovirt-engineeqovirt-engine-3.6.0_alpha3
ovirt-engineeqovirt-engine-3.6.0_alpha1.2
ovirt-engineeqovirt-engine-3.6.0_alpha1.1
ovirt-engineeqovirt-engine-3.3-beta1

Name	Operator	Version
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha2
ovirt-engine	eq	ovirt-engine-3.5.0_alpha1
ovirt-engine	eq	ovirt-engine-3.6.0_beta1.1
ovirt-engine	eq	ovirt-engine-3.5.0_alpha2
ovirt-engine	eq	ovirt-engine-3.6.0_qa1
ovirt-engine	eq	ovirt-engine-3.6.0_alpha3
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1.2
ovirt-engine	eq	ovirt-engine-3.6.0_alpha1.1
ovirt-engine	eq	ovirt-engine-3.3-beta1