Red Hat Enterprise Virtualization (RHEV) 3.2

CPE Details

Red Hat Enterprise Virtualization (RHEV) 3.2
redhat
enterprise_virtualization
3.2
2013-08-20
12h10 +00:00
2013-08-20
12h13 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

enterprise_virtualization

Version

3.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-5201 2020-02-25 19h16 +00:00 VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.
7.5
High
CVE-2016-6310 2017-08-22 16h00 +00:00 oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
5.5
Medium
CVE-2013-2151 2014-01-21 17h00 +00:00 Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.
7.2
CVE-2013-2152 2014-01-21 17h00 +00:00 Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.
7.2
CVE-2013-4181 2013-09-16 19h00 +00:00 Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2013-2176 2013-08-28 17h00 +00:00 Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privileges via a Trojan horse application.
7.2
CVE-2013-0167 2013-08-19 23h00 +00:00 VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."
2.7
CVE-2013-4236 2013-08-19 23h00 +00:00 VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
2.7