CVE-2015-0257

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2015-05-01

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Enterprise Virtualization Manager (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2015-0888.html
• http://www.securitytracker.com/id/1032231