Design/Logic Flaw

2013-07-0318:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

CPENameOperatorVersion
enterprise_virtualization_managereq2.1
enterprise_virtualization_managerle3.1
enterprise_virtualization_managereq2.2.3
enterprise_virtualization_managereq2.2
enterprise_virtualization_managereq3.0

Name	Operator	Version
enterprise_virtualization_manager	eq	2.1
enterprise_virtualization_manager	le	3.1
enterprise_virtualization_manager	eq	2.2.3
enterprise_virtualization_manager	eq	2.2
enterprise_virtualization_manager	eq	3.0

References

rhn.redhat.com/errata/RHSA-2013-0888.html