Lucene search

K
nvd[email protected]NVD:CVE-2013-2144
HistoryJul 03, 2013 - 6:55 p.m.

CVE-2013-2144

2013-07-0318:55:01
CWE-264
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

41.1%

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

Affected configurations

NVD
Node
redhatenterprise_virtualization_managerRange3.1
OR
redhatenterprise_virtualization_managerMatch2.1
OR
redhatenterprise_virtualization_managerMatch2.2
OR
redhatenterprise_virtualization_managerMatch2.2.3
OR
redhatenterprise_virtualization_managerMatch3.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

41.1%

Related for NVD:CVE-2013-2144