CVE-2015-0257 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local u...
LowCVSS 2.1
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization manager | <= 3.5.0 | No fix listed |
References
- RHSA-2015:0888 vendor-advisory
- 1032231 vdb-entry