CVE-2016-6341

Published: Apr 20, 2017
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2016-6341" target="_blank" rel="noopener"> CVE-2016-6341
Severity: Medium
Exploit:

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.