| Package | Affected versions | Patched versions |
|---|---|---|
| ovirt | ≤ 4.0.2 |
oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free