PT-2019-7093 · Red Hat · Cfme

Publicado 2019-12-15 · Atualizado 2019-12-19 · CVE-2014-3536

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CFME (CloudForms Management Engine) 5

Description The issue concerns the logging of RHN account information to top output.log during the registration process.

Recommendations For CFME (CloudForms Management Engine) 5, consider restricting access to the top output.log file to minimize the risk of exposing sensitive RHN account information.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2014-3536

Produtos afetados

Cfme

Referências · 3

• https://access.redhat.com/security/cve/cve-2014-3536 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3536 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3536 · Nota de Segurança