CVE-2016-4443
UnknownEPSS 0.24%
Last modified
CVE-2016-4443 is a vulnerability of currently unknown severity. Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Virtualization | 3.6 |
References
- http://rhn.redhat.com/errata/RHSA-2016-1929.htmlMitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92751Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036863Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1335106Issue Tracking, VDB Entry, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1929.htmlMitigation, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92751Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036863Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1335106Issue Tracking, VDB Entry, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4443?
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.
How severe is CVE-2016-4443?
Severity scoring for CVE-2016-4443 is pending analysis. The EPSS model estimates a 0.24% probability of exploitation in the next 30 days.
How do I fix CVE-2016-4443?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-4437Apache Shiro before 1.2.5, when a cipher key has not been co…9.8
- CVE-2016-4438The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 a…
- CVE-2016-4439The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fas…6.7
- CVE-2016-4440arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishand…7.8
- CVE-2016-4441The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI…6
- CVE-2016-4442The rack-mini-profiler gem before 0.10.1 for Ruby allows rem…
- CVE-2016-4444The allow_execmod plugin for setroubleshoot before 3.2.23 al…
- CVE-2016-4445The fix_lookup_id function in sealert in setroubleshoot befo…
- CVE-2016-4446The allow_execstack plugin for setroubleshoot allows local u…
- CVE-2016-4447The xmlParseElementDecl function in parser.c in libxml2 befo…
- CVE-2016-4448Format string vulnerability in libxml2 before 2.9.4 allows a…9.8
- CVE-2016-4449XML external entity (XXE) vulnerability in the xmlStringLenD…
Are you affected by CVE-2016-4443?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST