CVE-2019-10194: Ovirt

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

Affected products

• Ovirt Ovirt: any version
• Red Hat Virtualization Manager: version 4.3 only

Published 2019-07-11. Last modified 2026-06-17.