CVE-2017-7510
Fixed in a distro release EPSS 1%
In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.
Products: redhat ovirt-engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhev manager 4 | ovirt-engine | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-backend | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-dbscripts | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-extensions-api-impl | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-extensions-api-impl-javadoc | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-lib | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-restapi | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup-base | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-tools | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-tools-backup | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-userportal | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-vmconsole-proxy-helper | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-webadmin-portal | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | ovirt-engine-websocket-proxy | 0:4.1.4.2-0.1.el7 |
| Red Hat rhev manager 4 | rhevm | 0:4.1.4.2-0.1.el7 |