Lucene search
HistoryJan 04, 2013 - 10:55 p.m.
CVE-2011-4316
cve-2011-4316
red hat enterprise virtualization manager
rhev-m
spice sessions
desktop screen
security vulnerability
local users
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users’ desktop sessions via unspecified vectors.
Affected configurations
Node
redhatenterprise_virtualization_managerRange≤3.0
ORredhatenterprise_virtualization_managerMatch2.1
ORredhatenterprise_virtualization_managerMatch2.2
ORredhatenterprise_virtualization_managerMatch2.2.3
Related
nvd
nvd
CVE-2011-4316
2013-01-04 22:55:01
cvelist
cvelist
CVE-2011-4316
2013-01-04 22:00:00
prion
prion
Design/Logic Flaw
2013-01-04 22:55:00
nessus
nessus
RHEL 6 : Virtualization Manager (RHSA-2012:1506)
2014-11-08 00:00:00
redhat
redhat
(RHSA-2012:1506) Important: Red Hat Enterprise Virtualization Manager 3.1
2012-12-04 00:00:00
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2011-4316