Design/Logic Flaw

2013-01-0422:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users’ desktop sessions via unspecified vectors.

CPENameOperatorVersion
enterprise_virtualization_managereq2.1
enterprise_virtualization_managereq2.2.3
enterprise_virtualization_managereq2.2
enterprise_virtualization_managerle3.0

Name	Operator	Version
enterprise_virtualization_manager	eq	2.1
enterprise_virtualization_manager	eq	2.2.3
enterprise_virtualization_manager	eq	2.2
enterprise_virtualization_manager	le	3.0