CVE-2014-3561
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
Exploit likelihood
What each source reports
NVD Score used
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
CVE-2014-3561- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
CVE-2014-3561- Updated
- 2026-11-02
EUVDEUVD-2014-3543 No score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
EUVD-2014-3543- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxxj-4ccj-cfw9 No score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
GHSA-xxxj-4ccj-cfw9- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhevm-log-collectorRed Hat:rhev_manager:3 |
before 0:3.4.5-2.el6ev | 0:3.4.5-2.el6ev |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3561 is a low vulnerability (CVSS 2.1) in Redhat Enterprise Virtualization, published December 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in rhevm-log-collector 0:3.4.5-2.el6ev.