Vulnerabilities in oVirt

3 results

Vexday analysis

O oVirt apresenta um perfil de risco baixo com apenas 2 CVEs registradas na base, nenhuma delas sob exploração ativa (KEV) ou classificada como crítica. A fraqueza dominante identificada é a CWE-212 (Improper Cross-boundary Removal of Sensitive Data), sem atividades exploratórias recentes que justifiquem priorização imediata.

CVE-2018-1062—A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disksEPSS 1.4%CVE-2015-1780—oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-centerEPSS 1.0%CVE-2019-10139MEDIUMDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-setup/cockpit/ansibleEPSS 0.2%