NetSight
medium6.8

CVE-2015-0237

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, w…

Impact

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.

Affected products

VendorProductAffected versions
RedhatEnterprise Virtualization Manager
through 3.5.0

Weakness classification

References