Nixpkgs Security Tracker

Dismissed

Permalink CVE-2024-7259

updated 1 year, 1 month ago by @LeSuisse Activity log

Created automatic suggestion 1 year, 1 month ago
@LeSuisse dismissed 1 year, 1 month ago

Ovirt-engine: potential exposure of cleartext provider passwords via web ui

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

Affected products

ovirt-engine

<4.5.7

Matching in nixpkgs

pkgs.rubyPackages.ovirt-engine-sdk

None

nixos-unstable 4.6.0
- nixos-unstable-small 4.6.0

pkgs.rubyPackages_3_1.ovirt-engine-sdk

None

nixos-unstable 4.6.0
- nixpkgs-unstable 4.6.0
- nixos-unstable-small 4.6.0

pkgs.rubyPackages_3_2.ovirt-engine-sdk

None

nixos-unstable 4.6.0
- nixpkgs-unstable 4.6.0
- nixos-unstable-small 4.6.0

pkgs.rubyPackages_3_3.ovirt-engine-sdk

None

nixos-unstable 4.6.0
- nixpkgs-unstable 4.6.0
- nixos-unstable-small 4.6.0

pkgs.rubyPackages_3_4.ovirt-engine-sdk

None

nixos-unstable 4.6.0
- nixpkgs-unstable 4.6.0
- nixos-unstable-small 4.6.0

Suggestion detail

Affected products

Matching in nixpkgs

pkgs.rubyPackages.ovirt-engine-sdk

pkgs.rubyPackages_3_1.ovirt-engine-sdk

pkgs.rubyPackages_3_2.ovirt-engine-sdk

pkgs.rubyPackages_3_3.ovirt-engine-sdk

pkgs.rubyPackages_3_4.ovirt-engine-sdk