Lucene search
HistoryJan 04, 2013 - 10:55 p.m.
CVE-2012-2696
red hat
enterprise virtualization
manager
backend
privilege
vulnerability
rhev-m
soap
gwt
nvd
cve-2012-2696
6.3 Medium
AI Score
Confidence
Low
2.7 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
48.2%
The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.
Affected configurations
Node
redhatenterprise_virtualization_managerRange≤3.0
ORredhatenterprise_virtualization_managerMatch2.1
ORredhatenterprise_virtualization_managerMatch2.2
ORredhatenterprise_virtualization_managerMatch2.2.3
Related
cvelist
cvelist
CVE-2012-2696
2013-01-04 22:00:00
prion
prion
Cross site request forgery (csrf)
2013-01-04 22:55:00
nvd
nvd
CVE-2012-2696
2013-01-04 22:55:01
redhat
redhat
(RHSA-2012:1506) Important: Red Hat Enterprise Virtualization Manager 3.1
2012-12-04 00:00:00
nessus
nessus
RHEL 6 : Virtualization Manager (RHSA-2012:1506)
2014-11-08 00:00:00
6.3 Medium
AI Score
Confidence
Low
2.7 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
48.2%
Related for CVE-2012-2696