Filtered by vendor Redhat Subscriptions
Filtered by product Rhevm-reports Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-0201 1 Redhat 2 Rhev Manager, Rhevm-reports 2024-11-21 N/A
ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.
CVE-2014-0200 1 Redhat 2 Rhev Manager, Rhevm-reports 2024-11-21 N/A
The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file.
CVE-2014-0199 1 Redhat 2 Rhev Manager, Rhevm-reports 2024-11-21 N/A
The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.