A flaw was found in ovirt-engine. When engine-setup is run and one chooses to provision the database manually or connect to a remote database, the password input is logged but filtered only later, after verification that it is correct. References: https://bugzilla.redhat.com/show_bug.cgi?id=1540622
Didi can you please push the fixes to gerrit?
https://gerrit.ovirt.org/91653 Added it to external trackers of bug 1558813.
Acknowledgments: Name: Yedidyah Bar David (Red Hat)
This issue has been addressed in the following products: Red Hat Virtualization Engine 4.2 Via RHSA-2018:2071 https://access.redhat.com/errata/RHSA-2018:2071
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2018-1075