Design/Logic Flaw

2013-03-1223:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.

CPENameOperatorVersion
enterprise_virtualization_managereq2.1
enterprise_virtualization_managerle3.1
enterprise_virtualization_managereq2.2.3
enterprise_virtualization_managereq2.2
enterprise_virtualization_managereq3.0

Name	Operator	Version
enterprise_virtualization_manager	eq	2.1
enterprise_virtualization_manager	le	3.1
enterprise_virtualization_manager	eq	2.2.3
enterprise_virtualization_manager	eq	2.2
enterprise_virtualization_manager	eq	3.0