CVE-2016-5432 — LOW (3.3) — White Hats Nepal

Vulnerability Description

The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.

CVSS Score

3.3

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Redhat	Enterprise Virtualization	4.0
Redhat	Enterprise Linux	7.0

Related Weaknesses (CWE)

CWE-532

References

http://rhn.redhat.com/errata/RHSA-2016-1967.htmlVendor Advisory
http://www.securityfocus.com/bid/92694
https://bugzilla.redhat.com/show_bug.cgi?id=1371428Issue TrackingPatchVendor Advisory
https://gerrit.ovirt.org/#/q/I40c88ad48f8f7c2b8e06802137870b0c198b5129Patch
http://rhn.redhat.com/errata/RHSA-2016-1967.htmlVendor Advisory
http://www.securityfocus.com/bid/92694
https://bugzilla.redhat.com/show_bug.cgi?id=1371428Issue TrackingPatchVendor Advisory
https://gerrit.ovirt.org/#/q/I40c88ad48f8f7c2b8e06802137870b0c198b5129Patch

FAQ

What is CVE-2016-5432?

CVE-2016-5432 is a vulnerability with a CVSS score of 3.3 (LOW). The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.

How severe is CVE-2016-5432?

CVE-2016-5432 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-5432?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization, Redhat Enterprise Linux.