NetSight
low2.1

CVE-2014-0201

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configu…

Impact

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.

Affected products

VendorProductAffected versions
RedhatRhevm-Reports
through 3.3
Versions 3.0, 3.1, 3.2

Weakness classification

References