CVE-2014-3561
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...
CVE-2014-3561 is a low vulnerability (CVSS 2.1) in Redhat Enterprise Virtualization, published December 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in rhevm-log-collector 0:3.4.5-2.el6ev.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 31st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:3.4.5-2.el6evrhevm-log-collector
Description
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhevm-log-collectorRed Hat:rhev_manager:3 | before 0:3.4.5-2.el6ev | 0:3.4.5-2.el6ev |
What each source reports
NVD Score used
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
CVE-2014-3561- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
CVE-2014-3561- Updated
- 2026-11-02
EUVDEUVD-2014-3543No score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
EUVD-2014-3543- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxxj-4ccj-cfw9No score
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...
The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.
- Record
GHSA-xxxj-4ccj-cfw9- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.