CVE-2015-0257
Red Hat Enterprise Virtualization Manager < 3.5.1 - Information Disclosure via Weak Directory Permissions
Title source: llmDescription
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032231
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-0888.html
Scores
EPSS
0.0038
EPSS Percentile
30.8%
Details
CWE
CWE-264
Status
published
Products (1)
redhat/enterprise_virtualization_manager
< 3.5.0
Published
May 01, 2015
Tracked Since
Feb 18, 2026