CVE-2012-6115
published 2013-03-12CVE-2012-6115: The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled…
PriorityP46low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.37%
29.3th percentile
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_virtualization_manager | <= 3.1 | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v9rq-qgv5-9mqc: The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3
ghsa_unreviewed·2022-05-17
CVE-2012-6115 [LOW] GHSA-v9rq-qgv5-9mqc: The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
Red Hat
rhev: rhevm-manage-domains logs admin passwords
vendor_redhat·2012-12-17·CVSS 2.1
CVE-2012-6115 [LOW] rhev: rhevm-manage-domains logs admin passwords
rhev: rhevm-manage-domains logs admin passwords
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.
Package: ovirt-engine-config (Red Hat Enterprise Virtualization 2) - Not affected
No detection rules found.
No public exploits indexed.
http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commit%3Bh=e8c72daec4efa8be0fcd8ea55c41e855ddd8eedfhttp://rhn.redhat.com/errata/RHSA-2013-0211.htmlhttp://www.securityfocus.com/bid/57749http://www.securitytracker.com/id/1028076https://bugzilla.redhat.com/show_bug.cgi?id=893355https://exchange.xforce.ibmcloud.com/vulnerabilities/81833http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git%3Ba=commit%3Bh=e8c72daec4efa8be0fcd8ea55c41e855ddd8eedfhttp://rhn.redhat.com/errata/RHSA-2013-0211.htmlhttp://www.securityfocus.com/bid/57749http://www.securitytracker.com/id/1028076https://bugzilla.redhat.com/show_bug.cgi?id=893355https://exchange.xforce.ibmcloud.com/vulnerabilities/81833
2013-03-12
Published