CVE-2018-1000018

2018-01-2414:29:00

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user’s password in the log file.

CPENameOperatorVersion
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.2.1
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.0.0_alpha1
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.0.0_beta1
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-1.3.0_qa4
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-1.3.0_alpha2
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.2.3
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.2.4
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-1.2.0_beta1
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-1.3.0_qa1
ovirt-hosted-engine-setupeqovirt-hosted-engine-setup-2.0.0.1

Name	Operator	Version
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.2.1
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.0.0_alpha1
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.0.0_beta1
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-1.3.0_qa4
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-1.3.0_alpha2
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.2.3
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.2.4
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-1.2.0_beta1
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-1.3.0_qa1
ovirt-hosted-engine-setup	eq	ovirt-hosted-engine-setup-2.0.0.1