low2.1
CVE-2014-0199
The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports dat…
Impact
The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Rhevm-Reports | through 3.3 Versions 3.0, 3.1, 3.2 |