CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Information Exposure
Summary: red hat cloudforms 3.2 management engine (cfme) 5.4.4 and cloudforms 4.0 management engine (cfme) 5.5.0 do not properly encrypt data in the backend postgresql database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2016-04-11
Last Modified Date: 2016-04-18