CVE-2024-7259

CVE Details

Release Date:2024-09-26
Impact:Moderate What is this?

Description


A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

See more information about CVE-2024-7259 from MITRE CVE dictionary and NIST NVD


NOTE: The following CVSS metrics and score provided are preliminary and subject to review.


CVSS v3 metrics

Base Score: 4.4
Vector String: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Version: 3.1
Attack Vector: Network
Attack Complexity: High
Privileges Required: High
User Interaction: None
Scope: Unchanged
Confidentiality Impact: High
Integrity Impact: None
Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Linux version 8 (ovirt-engine)ELSA-2024-126982024-09-26
Oracle Linux version 8 (ovirt-engine)ELSA-2024-127012024-09-30


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete