CVE-2016-4443

Опубликовано: 14 дек. 2016

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.

Ссылки

http://rhn.redhat.com/errata/RHSA-2016-1929.html
Mitigation
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92751
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036863
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1335106
Issue Tracking
VDB Entry
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-1929.html
Mitigation
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92751
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036863
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1335106
Issue Tracking
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:enterprise_virtualization:3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00047

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-532

Связанные уязвимости

CVE-2016-4443

redhat

больше 9 лет назад

Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.

GHSA-crrm-jp94-w9fv

CVSS3: 5.5

github

больше 3 лет назад

Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.

EPSS

Процентиль: 15%

0.00047

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-532