Lucene search
HistoryMay 29, 2014 - 2:19 p.m.
CVE-2014-0201
cve-2014-0201
ovirt-engine-reports
red hat enterprise virtualization
rhevm-reports
sensitive information disclosure
nvd
security vulnerability
5.9 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.
Affected configurations
Node
redhatrhevm-reportsRange≤3.3
ORredhatrhevm-reportsMatch3.0
ORredhatrhevm-reportsMatch3.1
ORredhatrhevm-reportsMatch3.2
Related
prion
prion
Design/Logic Flaw
2014-05-29 14:19:00
nvd
nvd
CVE-2014-0201
2014-05-29 14:19:07
cvelist
cvelist
CVE-2014-0201
2014-05-29 14:00:00
nessus
nessus
RHEL 6 : rhevm-reports 3.3.3 (RHSA-2014:0558)
2014-11-08 00:00:00
redhat
redhat
(RHSA-2014:0558) Low: rhevm-reports 3.3.3 security and bug fix update
2014-05-27 00:00:00
5.9 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2014-0201