CVE:CVE-2018-1000018
CNNVD:CNNVD-201801-920
ovirt-hosted-engine-setup是一款虚拟主机引擎安装工具。
ovirt-hosted-engine-setup 2.2.7之前版本中存在信息泄露漏洞。攻击者可利用该漏洞获取日志文件中的root用户密码。
solution:Upgrade ovirt ovirt-hosted-engine-setup to a higher version than 2.2.7,and avoid the version (,2.2.7)