CVE Feed

    Dashboard / CVE / CVE-2014-0199

    CVE-2014-0199

    The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.

    Published:May 27, 2014
    Last Modified:Apr 12, 2025
    EPS:May 29, 2014
    EPSS Score:0.00056
    CVSS Score:2.1

    Affected Products

    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Redhat
    Product
    Rhevm-reports

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-0822 (CVSS 7.5) — An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in th…
    CVE-2023-20861 (CVSS 6.5) — In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsuppor…
    CVE-2023-20860 (CVSS 7.5) — Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security co…
    CVE-2022-41946 (CVSS 4.7) — pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `Prepa…
    CVE-2022-45047 (CVSS 9.8) — Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java…
    CVE-2022-31129 (CVSS 7.5) — moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected vers…
    CVE-2022-31051 (CVSS 4.4) — semantic-release is an open source npm package for automated version management and package publishing. In aff…
    CVE-2022-2806 (CVSS 5.5) — It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-…
    CVE-2022-2805 (CVSS 6.5) — A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using…
    CVE-2022-24903 (CVSS 8.1) — Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High