Enterprise Virtualization Manager (Redhat) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2019-11-09. Vendor: Redhat.
CVEs of Enterprise Virtualization Manager
- CVE-2009-3552 - CVSS 3.1 (low), 2019-11-09: In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a…
- CVE-2018-1072 - CVSS 9.8 (critical), 2018-06-26: ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options…
- CVE-2018-8897 - CVSS 7.8 (high), 2018-05-08: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of…
- CVE-2015-7544 - CVSS 9.1 (critical), 2017-09-25: redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser…
- CVE-2015-5293 - CVSS 5.9 (medium), 2017-08-24: Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might…
- CVE-2015-0257 - CVSS 2.1 (low), 2015-05-01: Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin…
- CVE-2015-0237 - CVSS 6.8 (medium), 2015-05-01: Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains,…
- CVE-2014-3573 - CVSS 6.5 (medium), 2014-10-18: The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows…
- CVE-2013-6434 - CVSS 4.3 (medium), 2014-01-24: The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes…
- CVE-2013-2144 - CVSS 5 (medium), 2013-07-03: Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to…
- CVE-2013-0168 - CVSS 4 (medium), 2013-03-12: The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which…
- CVE-2012-6115 - CVSS 2.1 (low), 2013-03-12: The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled,…
- CVE-2012-5516 - CVSS 2.1 (low), 2013-01-04: Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents…
- CVE-2012-0861 - CVSS 6.8 (medium), 2013-01-04: The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading…
- CVE-2011-4316 - CVSS 3.7 (low), 2013-01-04: Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions,…
- CVE-2012-0860 - CVSS 6.2 (medium), 2013-01-04: Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain…
- CVE-2012-2696 - CVSS 2.7 (low), 2013-01-04: The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to…
- CVE-2010-2793 - CVSS 6.8 (medium), 2010-12-08: Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local…
- CVE-2010-2224 - CVSS 2.1 (low), 2010-06-24: The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during…
