CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.7. See the original NVD description below for full technical details.
CVE
CVE-2018-1074
Severity
HIGH
CVSS
7.7
EPSS
1.50%
Original NVD Description
ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.
Related CVEs
Other vulnerabilities affecting the same vendor(s)