CVE-2016-6341: Ovirt

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.

Affected products

• Ovirt Ovirt: up to and including 4.0.2

Published 2017-04-20. Last modified 2026-06-17.