Information disclosure in Redhat Enterprise Virtualization Manager

CVE-2012-5516

Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.