CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
Percentile
41.0%
Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.
Vendor | Product | Version | CPE |
---|---|---|---|
redhat | enterprise_virtualization_manager | * | cpe:2.3:a:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:* |
redhat | enterprise_virtualization_manager | 2.1 | cpe:2.3:a:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:* |
redhat | enterprise_virtualization_manager | 2.2 | cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:* |
redhat | enterprise_virtualization_manager | 2.2.3 | cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:* |
redhat | enterprise_virtualization_manager | 3.0 | cpe:2.3:a:redhat:enterprise_virtualization_manager:3.0:*:*:*:*:*:*:* |