CVE-2014-0202 in rhevm-dwhinfo

Summary

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

12/03/2013

Disclosure

05/30/2014

Entries

1: VDB-69868

CPE

ready

CVSS

4.0

EPSS

0.00056

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!