CVE-2016-6310

CVE-2016-6310 describes a vulnerability in oVirt Engine, specifically affecting Red Hat Enterprise Virtualization (RHEV) before version 4.0. The flaw involves the inadvertent disclosure of the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD within the /var/log/ovirt-engine/engine.log file. With a CVSS score of 5.5 (Medium), this vulnerability requires local access and low privileges to exploit, potentially leading to a high impact on confidentiality by exposing sensitive credentials. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or ExploitDB entries, and it has received minimal community discussion or media coverage.