MEDIUM Published September 26, 2024

CVE-2024-7259

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

CVSS base score

4.9 (v3.1)

Severity

MEDIUM

Attack vector

Network

Weakness

CWE-312

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

ovirt ovirt-engine

References

access.redhat.com Vendor Advisory
bugzilla.redhat.com Issue Tracking, Vendor Advisory

View full NVD advisory → ← Back to CVE watch

CVE-2024-7259

Affected products

References

Related reading