Products
oVirt
Source
secalert@redhat.com
Tags
CVE-2024-7259 details
Published : Sept. 26, 2024, 4:15 p.m.
Last Modified : Sept. 26, 2024, 4:15 p.m.
Last Modified : Sept. 26, 2024, 4:15 p.m.
Description
A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.
CVSS Score
| 1 | 2 | 3 | 4.4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-312 | Cleartext Storage of Sensitive Information | The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Base Score
4.4
Exploitability Score
0.7
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
References
| URL | Source |
|---|---|
| https://access.redhat.com/security/cve/CVE-2024-7259 | secalert@redhat.com |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314229 | secalert@redhat.com |
This website uses the NVD API, but is not approved or certified by it.