4
CVE-2013-0168
- EPSS 1.92%
- Veröffentlicht 12.03.2013 23:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Virtualization Manager Version <= 3.1
Redhat ≫ Enterprise Virtualization Manager Version2.1
Redhat ≫ Enterprise Virtualization Manager Version2.2
Redhat ≫ Enterprise Virtualization Manager Version2.2.3
Redhat ≫ Enterprise Virtualization Manager Version3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.92% | 0.772 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
http://rhn.redhat.com/errata/RHSA-2013-0211.html
http://www.securitytracker.com/id/1028076
https://bugzilla.redhat.com/show_bug.cgi?id=893355
http://www.securityfocus.com/bid/57750
https://exchange.xforce.ibmcloud.com/vulnerabilities/81834