NetSight
medium4.9

CVE-2014-0184

Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive informa…

Impact

Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.

Affected products

VendorProductAffected versions
RedhatCloudforms 3.0 Management Engine
through 5.2.4
Versions 5.2, 5.2.1, 5.2.1.6, 5.2.2, 5.2.3

Weakness classification

References