CVE-2014-0189
Fixed in a distro release EPSS <1%
virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, virt-who_project virt-who
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | virt-who | 0:0.10-8.el6 |
| Red Hat Enterprise Linux 7 | virt-who | 0:0.11-5.el7 |
| Red Hat rhel virtualization 5 | virt-who | 0:0.9-6.el5 |