Security Advisory

CVE-2015-0257

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-05-01 15:00:00
Last updated 2024-08-06 04:03:10
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.