PT-2010-4945

CVE-2010-3584

·

Published

2010-10-14

·

Updated

2018-10-10

Description by

CVSS 2.0
4.3
Medium
MetricsAV:L/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Oracle VM version 2.2.1
Description The issue affects confidentiality, integrity, and availability. It is related to the ovs-agent in Oracle VM. There are claims from a third-party researcher that this issue might be related to the storage of passwords and password hashes in cleartext in files with insecure permissions.
Recommendations For Oracle VM version 2.2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
CVE-2010-3584
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com