Lucene search
RedhatCVE-2012-0860HistoryJan 04, 2013 - 10:55 p.m.
CVE-2012-0860
2013-01-0422:55:01
redhat
web.nvd.nist.gov
32
cve-2012-0860
red hat
rhev-m
vulnerabilities
local users
privileges
nvd
security
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
25.6%
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.
Affected configurations
Node
redhatenterprise_virtualization_managerRange≤3.0
ORredhatenterprise_virtualization_managerMatch2.1
ORredhatenterprise_virtualization_managerMatch2.2
ORredhatenterprise_virtualization_managerMatch2.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_virtualization_manager | * | cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:* |
| redhat | enterprise_virtualization_manager | 2.1 | cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:* |
| redhat | enterprise_virtualization_manager | 2.2 | cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:* |
| redhat | enterprise_virtualization_manager | 2.2.3 | cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2012-0860
2013-01-04 22:55:01
prion
prion
Design/Logic Flaw
2013-01-04 22:55:00
cvelist
cvelist
CVE-2012-0860
2013-01-04 22:00:00
redhat
redhat
(RHSA-2012:1505) Important: rhev-hypervisor6 security, bug fix, and enhancement update
2012-12-04 00:00:00
(RHSA-2012:1508) Important: rhev-3.1.0 vdsm security, bug fix, and enhancement update
2012-12-04 00:00:00
(RHSA-2012:1506) Important: Red Hat Enterprise Virtualization Manager 3.1
2012-12-04 00:00:00
nessus
nessus
RHEL 6 : rhev-3.1.0 vdsm (RHSA-2012:1508)
2014-11-08 00:00:00
RHEL 6 : rhev-hypervisor6 (RHSA-2012:1505)
2014-11-08 00:00:00
RHEL 6 : Virtualization Manager (RHSA-2012:1506)
2014-11-08 00:00:00
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
25.6%
Related for CVE-2012-0860