Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-2144

Опубликовано: 03 июл. 2013
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*
Версия до 3.1 (включая)
cpe:2.3:a:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_virtualization_manager:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.01244
Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

redhat
около 13 лет назад

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

github
около 4 лет назад

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

EPSS

Процентиль: 66%
0.01244
Низкий

5 Medium

CVSS2

Дефекты

CWE-264