The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information

The vulnerability of the virt-who-0.10 package of the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. Exploitation of this vulnerability can be carried out locally...

PT-2014-1855 · Red Hat +1 · Virt-Who +2

Name of the Vulnerable Software and Affected Versions: virt-who versions 0.10 Description: The issue allows local users to obtain the password for hypervisors by reading the /etc/sysconfig/virt-who file due to world-readable permissions. This can lead to a breach of confidentiality of protected...