CVE-2012-6115: Low severity red hat enterprise virtualization manager vulnerability
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6115?
CVE-2012-6115 is considered a critical vulnerability due to the exposure of sensitive administrative password information.
How do I fix CVE-2012-6115?
To fix CVE-2012-6115, it is recommended to upgrade to a patched version of Red Hat Enterprise Virtualization Manager that resolves this logging issue.
Who is affected by CVE-2012-6115?
CVE-2012-6115 affects users of Red Hat Enterprise Virtualization Manager versions 3.1 and earlier.
What type of attack can exploit CVE-2012-6115?
CVE-2012-6115 can be exploited by local users who can read the world-readable log file containing the administrative password.
What is the impact of CVE-2012-6115?
The impact of CVE-2012-6115 includes potential unauthorized access to the virtualization environment due to leaked administrative credentials.