Security Advisory
CVE-2014-0189
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file.