Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Rhevm-reports
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0199 1 Redhat 1 Rhevm-reports 2023-12-10 2.1 LOW N/A
The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.
CVE-2014-0201 1 Redhat 1 Rhevm-reports 2023-12-10 2.1 LOW N/A
ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.
CVE-2014-0200 1 Redhat 1 Rhevm-reports 2023-12-10 2.1 LOW N/A
The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file.