Default credentials

2014-07-0714:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file.

CPENameOperatorVersion
cloudforms_3.0_management_engineeq5.2.1
cloudforms_3.0_management_enginele5.2.4
cloudforms_3.0_management_engineeq5.2.1.6
cloudforms_3.0_management_engineeq5.2.3.2
cloudforms_3.0_management_engineeq5.2.2
cloudforms_3.0_management_engineeq5.2
cloudforms_3.0_management_engineeq5.2.3

Name	Operator	Version
cloudforms_3.0_management_engine	eq	5.2.1
cloudforms_3.0_management_engine	le	5.2.4
cloudforms_3.0_management_engine	eq	5.2.1.6
cloudforms_3.0_management_engine	eq	5.2.3.2
cloudforms_3.0_management_engine	eq	5.2.2
cloudforms_3.0_management_engine	eq	5.2
cloudforms_3.0_management_engine	eq	5.2.3

References

rhn.redhat.com/errata/RHSA-2014-0816.html