Red Hat CloudForms Management Engine Default Salt Local Information Disclosure Vulnerability

Bugtraq ID:	68299
Class:	Design Error
CVE:	CVE-2014-3489
Remote:	No
Local:	Yes
Published:	Jul 01 2014 12:00AM
Updated:	Jul 01 2014 12:00AM
Credit:	Red Hat
Vulnerable:
Not Vulnerable:

Red Hat CloudForms Management Engine Default Salt Local Information Disclosure Vulnerability

Red Hat CloudForms Management Engine is prone to a local information-disclosure vulnerability.

A local attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

Red Hat CloudForms Management Engine Default Salt Local Information Disclosure Vulnerability

An attacker requires local interactive access to exploit the issue.

Red Hat CloudForms Management Engine Default Salt Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Red Hat CloudForms Management Engine Default Salt Local Information Disclosure Vulnerability

References:

• Red Hat Homepage (Red Hat)