Unrated severityOSV Advisory· Published Jun 19, 2018· Updated Aug 5, 2024
CVE-2018-1073
CVE-2018-1073
Description
The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.
Affected products
1- Range: list, ovirt-engine-3.3-beta1, ovirt-engine-3.3_beta1, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- access.redhat.com/errata/RHSA-2018:1525mitrevendor-advisoryx_refsource_REDHAT
- www.securityfocus.com/bid/104189mitrevdb-entryx_refsource_BID
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.