Red Hat Enterprise Virtualization Manager CVE-2012-6115 Local Information Disclosure Vulnerability

Bugtraq ID:	57749
Class:	Design Error
CVE:	CVE-2012-6115
Remote:	No
Local:	Yes
Published:	Feb 05 2013 12:00AM
Updated:	Mar 26 2013 12:36PM
Credit:	Andrew Cathrow from Red Hat
Vulnerable:	Red Hat Enterprise Virtualization Manager 3.0
Not Vulnerable:

Red Hat Enterprise Virtualization Manager CVE-2012-6115 Local Information Disclosure Vulnerability

Red Hat Enterprise Virtualization Manager is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to disclose sensitive information. Information obtained may lead to further attacks.

Red Hat Enterprise Virtualization Manager 3.1 is vulnerable; other versions may also be affected.

Red Hat Enterprise Virtualization Manager CVE-2012-6115 Local Information Disclosure Vulnerability

Local attackers can use standard tools to exploit this issue.

Red Hat Enterprise Virtualization Manager CVE-2012-6115 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Red Hat Enterprise Virtualization Manager CVE-2012-6115 Local Information Disclosure Vulnerability

References:

• Red Hat Enterprise Virtualization Manager Homepage (Red Hat)