CVEvulnerability
CVE-2014-3561
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-12-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
Affected configurations
• redhat enterprise virtualization 3.4
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://rhn.redhat.com/errata/RHSA-2014-1947.html Vendor Advisory
- http://www.securitytracker.com/id/1031291 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99096 exchange.xforce.ibmcloud.com
- http://rhn.redhat.com/errata/RHSA-2014-1947.html Vendor Advisory
- http://www.securitytracker.com/id/1031291 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99096 exchange.xforce.ibmcloud.com