Red Hat Security AdvisoryRHSA-2015:0888
Red Hat Enterprise Virtualization Manager 3.5.1 update
Released 2015-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEV-M 3.5 rhevm-3.5.1-0.4.el6ev, rhevm-backend-3.5.1-0.4.el6ev, rhevm-dbscripts-3.5.1-0.4.el6ev +14
Fixes 2 records
Priority LOW 33
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of s…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01579 · Published 2015-05-01 · Fixed CWE-264
Priority LOW 11
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensi…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00383 · Published 2015-05-01 · Fixed CWE-264
