CVE-2014-0200

The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:rhevm-reports:3.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:3.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:3.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:3.2:*:*:*:*:*:*:*

Information

Published : 2014-05-29 07:19

Updated : 2023-02-12 16:37


NVD link : CVE-2014-0200

Mitre link : CVE-2014-0200


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

redhat

  • rhevm-reports