CVE-2016-4443 Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
MediumCVSS 5.5
EPSS 0.24%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization | = 3.6 | No fix listed |
References
- RHSA-2016:1929 mitigation patch vendor-advisory
- 92751 third-party-advisory vdb-entry
- 1036863 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking vdb-entry vendor-advisory