Vulnerability in Redhat Enterprise Virtualization Manager
CVE-2013-2144
Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.
EPSS: 0.012 (66.2th percentile) — read the EPSS interpretation.
Affected products
- Redhat Enterprise_virtualization_manager — versions 2.1, 2.2, 2.2.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)