NetSight
medium5.0

CVE-2013-2144

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause…

Impact

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

Affected products

VendorProductAffected versions
RedhatEnterprise Virtualization Manager
through 3.1
Versions 2.1, 2.2, 2.2.3, 3.0

Weakness classification

References