CVE-2013-0293

The CVE-2013-0293 entry concerns oVirt Node. The issue occurs when the lock screen accepts F2 to drop to a shell, enabling local privilege escalation from a non-privileged state to a higher-privilege level. Per NVD, the vulnerability is local with low attack complexity and no authentication, and ...

CVE-2013-0293

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

CVE-2013-0293: Improper Privilege Management

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...

PT-2019-6842

Name of the Vulnerable Software and Affected Versions oVirt Node affected versions not specified Description The issue allows privilege escalation due to the lock screen accepting F2 to drop to shell. This can potentially be exploited to gain unauthorized access. Recommendations At the moment,...

CVE-2015-1780

oVirt users with MANIPULATESTORAGEDOMAIN permissions can attach a storage domain to any data-center...

Design/Logic Flaw

oVirt users with MANIPULATESTORAGEDOMAIN permissions can attach a storage domain to any data-center...

CVE-2015-1780

CVE-2015-1780 affects oVirt (notably ovirt-engine) where users holding MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center. The connected Nessus entries corroborate an unpatched exposure for this vulnerability, but the provided documents do not include patch versi...

CVE-2015-1780

oVirt users with MANIPULATESTORAGEDOMAIN permissions can attach a storage domain to any data-center...

PT-2019-7171

Name of the Vulnerable Software and Affected Versions oVirt affected versions not specified Description The issue allows oVirt users with MANIPULATE STORAGE DOMAIN permissions to attach a storage domain to any data-center. Recommendations At the moment, there is no information about a newer versi...

CVE-2015-1780: Incorrect Authorization

oVirt users with MANIPULATESTORAGEDOMAIN permissions can attach a storage domain to any data-center...

Unspecified vulnerability in ovirt-engine

ovirt-engine is an open source virtualization management engine. A security vulnerability exists in ovirt-engine version 3.2 running on Linux kernel 3.1 and later, which can be exploited by attackers to read files...

CVE-2013-4367

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

Code injection

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

CVE-2013-4367

CVE-2013-4367 affects ovirt-engine 3.2 running on Linux kernel 3.1 and newer, where upstream kernel behavior change with os.chmod(-1) causes certain files to become world-writable. This is a local attacker issue with potential exposure of sensitive data, as reflected by CVSS metrics (NVD CVSSv3.1...

CVE-2013-4367

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

PT-2019-6945

Name of the Vulnerable Software and Affected Versions ovirt-engine version 3.2 Description The issue arises from an upstream kernel change affecting how python's os.chmod works when passed a mode of '-1', resulting in certain files being created world-writeable on Linux kernel 3.1 and newer...

CVE-2013-4367: Incorrect Permission Assignment for Critical Resource

ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod works when passed a mode of '-1'...

RHEL 7 : Virtualization Manager (RHSA-2019:3024)

An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : Virtualization Manager (RHSA-2019:3023)

An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2018-1097

A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource...