CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Information Exposure
Summary: red hat cloudforms 3.2 management engine (cfme) 5.4.4 and cloudforms 4.0 management engine (cfme) 5.5.0 do not properly encrypt data in the backend postgresql database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2016-04-11
Last Modified Date: 2016-04-18
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Information Exposure.
user
CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Information Exposure
Summary: red hat cloudforms 3.2 management engine (cfme) 5.4.4 and cloudforms 4.0 management engine (cfme) 5.5.0 do not properly encrypt data in the backend postgresql database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2016-04-11
Last Modified Date: 2016-04-18
assistant