Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise virtualization manager vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2012-5516
Red Hat Enterprise Virtualization Manager (RHEV-M) prior to 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.
Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization Manager 2.2.4Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.1
4
CVSSv2
CVE-2013-0168
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and previous versions does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage doma...
Redhat Enterprise Virtualization Manager 3.0Redhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.1
5
CVSSv2
CVE-2013-2144
Red Hat Enterprise Virtualization Manager (RHEVM) prior to 3.2 does not properly check permissions for the target storage domain, which allows malicious users to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.
Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.1Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 3.0Redhat Enterprise Virtualization Manager 2.2.3
2.1
CVSSv2
CVE-2012-6115
The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and previous versions, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive info...
Redhat Enterprise Virtualization Manager 2.1Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 3.0
2.7
CVSSv2
CVE-2012-2696
The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) prior to 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.
Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.1
3.7
CVSSv2
CVE-2011-4316
Red Hat Enterprise Virtualization Manager (RHEV-M) prior to 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecif...
Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.1
6.2
CVSSv2
CVE-2012-0860
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) prior to 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.
Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization ManagerRedhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization Manager 2.1
6.8
CVSSv2
CVE-2012-0861
The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) prior to 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote malicious users to exec...
Redhat Enterprise Virtualization Manager 2.1Redhat Enterprise Virtualization Manager 2.2.3Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager
6.8
CVSSv2
CVE-2010-2793
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager prior to 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of thi...
Redhat Enterprise Virtualization Manager 2.2Redhat Enterprise Virtualization Manager 2.1Redhat Spice-activex -Redhat Enterprise Virtualization Manager
2.1
CVSSv2
CVE-2010-2224
The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) prior to 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks a...
Redhat Enterprise Virtualization Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook