| Package | Affected versions | Patched versions |
|---|---|---|
| ovirt | ≤ 4.1.11.1 | |
| enterprise virtualization | = 4.0 |
ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free