PT-2016-6427

CVE-2016-5432

Publicado

2016-10-03

Atualizado

2023-02-12

Descrição por

CVSS 3.1

3.3

Baixa

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization (RHEV) Engine version 4.0

Description The issue allows local users to obtain sensitive database provisioning information. This is achieved by reading log files, specifically those generated by the ovirt-engine-provisiondb utility.

Recommendations For Red Hat Enterprise Virtualization (RHEV) Engine version 4.0, consider restricting access to log files generated by the ovirt-engine-provisiondb utility to minimize the risk of sensitive information disclosure.

Explorabilidade

Correção

Impactos

Pesquisadores

Martin Prpič

Yedidyah Bar David

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-532: Insertion of Sensitive Information into Log File

Identificadores relacionados

CVE-2016-5432