Vulnerability in Redhat Cloudforms_3.0_management_engine
CVE-2014-0184
Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.
EPSS: 0.001 (32.3th percentile) — read the EPSS interpretation.
Affected products
- Redhat Cloudforms_3.0_management_engine — versions 5.2, 5.2.1, 5.2.1.6
- N/a — versions n/a
Weakness classification (CWE)
References
- RHSA-2014:0816 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)