3.7
CVE-2011-4316
- EPSS 0.33%
- Veröffentlicht 04.01.2013 22:55:01
- Zuletzt bearbeitet 16.06.2026 23:34:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginRed Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Virtualization Manager Version <= 3.0
Redhat ≫ Enterprise Virtualization Manager Version2.1
Redhat ≫ Enterprise Virtualization Manager Version2.2
Redhat ≫ Enterprise Virtualization Manager Version2.2.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.25 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.7 | 1.9 | 6.4 |
AV:L/AC:H/Au:N/C:P/I:P/A:P
|
http://rhn.redhat.com/errata/RHSA-2012-1506.html
http://rhn.redhat.com/errata/RHSA-2012-1508.html
http://www.securityfocus.com/bid/56825
http://www.securitytracker.com/id?1027838
https://bugzilla.redhat.com/show_bug.cgi?id=754876