Vulnerability Description
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Virtualization Manager | <= 3.5.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2015-0888.htmlVendor Advisory
- http://www.securitytracker.com/id/1032231
- http://rhn.redhat.com/errata/RHSA-2015-0888.htmlVendor Advisory
- http://www.securitytracker.com/id/1032231
FAQ
What is CVE-2015-0257?
CVE-2015-0257 is a vulnerability with a CVSS score of 2.1 (LOW). Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local u...
How severe is CVE-2015-0257?
CVE-2015-0257 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0257?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization Manager.