1. CVE-Search
  2. CVE-2012-6115
ID CVE-2012-6115
Summary The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:enterprise_virtualization_manager:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:enterprise_virtualization_manager:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:enterprise_virtualization_manager:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:enterprise_virtualization_manager:3.1:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 13-02-2023 - 04:37)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
redhat via4
advisories
rhsa
id RHSA-2013:0211
rpms
  • rhevm-0:3.1.0-43.el6ev
  • rhevm-backend-0:3.1.0-43.el6ev
  • rhevm-config-0:3.1.0-43.el6ev
  • rhevm-dbscripts-0:3.1.0-43.el6ev
  • rhevm-genericapi-0:3.1.0-43.el6ev
  • rhevm-notification-service-0:3.1.0-43.el6ev
  • rhevm-restapi-0:3.1.0-43.el6ev
  • rhevm-setup-0:3.1.0-43.el6ev
  • rhevm-setup-plugin-allinone-0:3.1.0-43.el6ev
  • rhevm-tools-common-0:3.1.0-43.el6ev
  • rhevm-userportal-0:3.1.0-43.el6ev
  • rhevm-webadmin-portal-0:3.1.0-43.el6ev
refmap via4
bid 57749
confirm
sectrack 1028076
xf enterprise-domain-tool-info-disc(81833)
Last major update 13-02-2023 - 04:37
Published 12-03-2013 - 23:55
Last modified 13-02-2023 - 04:37
Back to Top