Vulnerability in Redhat Enterprise Virtualization Manager
CVE-2010-2224
The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.
EPSS: 0.003 (25.2th percentile) — read the EPSS interpretation.
Affected products
- Redhat Enterprise_virtualization_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM)