Lucene search
Redhat.comRH:CVE-2019-3879HistoryMar 25, 2019 - 6:19 a.m.
CVE-2019-3879
2019-03-2506:19:57
redhat.com
access.redhat.com
23
0.002 Low
EPSS
Percentile
53.3%
It was discovered that in the ovirt REST API, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (e.g. Basic Operations) could exploit this flaw to delete disks attached to guests.
Related
nvd
nvd
CVE-2019-3879
2019-03-25 19:29:02
cve
cve
CVE-2019-3879
2019-03-25 19:29:02
osv
osv
CVE-2019-3879
2019-03-25 19:29:02
cvelist
cvelist
CVE-2019-3879
2019-03-25 18:30:17
prion
prion
Design/Logic Flaw
2019-03-25 19:29:00