Описание
Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-522
https://bugzilla.redhat.com/show_bug.cgi?id=1089131CFME: root password is written to evm.log when entered during VM provisioning
4.9 Medium
CVSS2
Связанные уязвимости
nvd
больше 11 лет назад
Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.
github
больше 3 лет назад
Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.
4.9 Medium
CVSS2