CVE-2015-0257

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-05-01 · updated 2026-06-17
Weakness: CWE-264

Description

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.

Affected products

RedHat Enterprise Virtualization Manager: through 3.5.0

References

http://rhn.redhat.com/errata/RHSA-2015-0888.html
http://www.securitytracker.com/id/1032231
http://rhn.redhat.com/errata/RHSA-2015-0888.html
http://www.securitytracker.com/id/1032231

Get alerted when CVE-2015-0257 or the next vulnerability affects your stack