Red Hat Security AdvisoryRHSA-2012:1508
rhev-3.1.0 vdsm security, bug fix, and enhancement update
Released 2012-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV Agents (vdsm) vdsm-4.9.6-44.0.el6_3, vdsm-cli-4.9.6-44.0.el6_3, vdsm-hook-vhostmd-4.9.6-44.0.el6_3 +2
Fixes 2 records
Priority LOW 32
The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.00895 · Published 2013-01-04 · Partial fix CWE-310
Priority LOW 28
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bo…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.004 · Published 2013-01-04 · Partial fix
