CVE-2018-1117

CVE-2018-1117 is a critical vulnerability affecting ovirt-ansible-roles versions prior to 1.0.6, as well as Red Hat Enterprise Virtualization. It involves the inadvertent disclosure of administrator passwords in provisioning logs due to a missing 'no_log' directive in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook. With a CVSS score of 9.8, this vulnerability allows for remote privilege escalation with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability if logs are accessible to unauthorized parties. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.