Ovirt-engine (Unknown) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-19. Vendor: Unknown.

CVEs of Ovirt-engine

• CVE-2018-1073 - CVSS 5.3 (medium), 2018-06-19: The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker…
• CVE-2018-1075 - CVSS 7.8 (high), 2018-06-12: ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engine-setup was run and one chooses to…