VULNERABILITY INTELLIGENCE
CVE-2014-3561
CVSS score2.1 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2014-12-05
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor