Vulnerability in Redhat Cloudforms 3.0 Management Engine

CVE-2014-0184

Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.

EPSS: 0.004 (33.0th percentile) — read the EPSS interpretation.

Affected products

Redhat Cloudforms_3.0_management_engine — versions 5.2, 5.2.1, 5.2.1.6
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)