CVE-2014-0201

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.
References
Link Resource
http://rhn.redhat.com/errata/RHSA-2014-0558.html Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:rhevm-reports:3.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:3.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:rhevm-reports:3.2:*:*:*:*:*:*:*

Information

Published : 2014-05-29 07:19

Updated : 2023-02-12 16:37


NVD link : CVE-2014-0201

Mitre link : CVE-2014-0201


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

redhat

  • rhevm-reports