Vulnerability in Redhat Enterprise Virtualization Manager
CVE-2012-0860
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.
EPSS: 0.004 (32.7th percentile) — read the EPSS interpretation.
Affected products
- Redhat Enterprise_virtualization_manager — versions 2.1, 2.2, 2.2.3
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)