CVE-2015-0237

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.

Score

CVSS 2.0 6.8 Medium

Status

Modified - secalert@redhat.com

Published

2015-05-01

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Enterprise Virtualization Manager (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2015-0888.html
• http://www.securitytracker.com/id/1032231