Information Disclosure

2019-01-1508:52:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

qemu-kvm-rhev is vulnerable to information disclosure attacks. The vulnerability exists as qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

CPENameOperatorVersion
qemu-kvm-rheveq0.12.1.2__2.295.el6_3.5
qemu-kvm-rheveq0.12.1.2__2.351.el6
qemu-kvm-rheveq0.12.1.2__2.295.el6_3.2
qemu-kvm-rheveq0.12.1.2__2.295.el6_3.10
qemu-kvm-rheveq0.12.1.2__2.295.el6_3.8
qemu-kvmeq0.12.1.2__2.160.el6_1.3
qemu-kvmeq0.12.1.2__2.113.el6_0.6
qemu-kvmeq0.12.1.2__2.160.el6_1.9
qemu-kvmeq0.12.1.2__2.113.el6
qemu-kvmeq0.12.1.2__2.295.el6

Name	Operator	Version
qemu-kvm-rhev	eq	0.12.1.2__2.295.el6_3.5
qemu-kvm-rhev	eq	0.12.1.2__2.351.el6
qemu-kvm-rhev	eq	0.12.1.2__2.295.el6_3.2
qemu-kvm-rhev	eq	0.12.1.2__2.295.el6_3.10
qemu-kvm-rhev	eq	0.12.1.2__2.295.el6_3.8
qemu-kvm	eq	0.12.1.2__2.160.el6_1.3
qemu-kvm	eq	0.12.1.2__2.113.el6_0.6
qemu-kvm	eq	0.12.1.2__2.160.el6_1.9
qemu-kvm	eq	0.12.1.2__2.113.el6
qemu-kvm	eq	0.12.1.2__2.295.el6