Red Hat Security AdvisoryRHSA-2015:0430
virt-who security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) virt-who-0.11-5.el7
- Red Hat Enterprise Linux Server (v. 7) virt-who-0.11-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) virt-who-0.11-5.el7
Fixes 1 record
Priority LOW 11
virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00385 · Published 2014-05-02 · Partial fix CWE-310
