PT-2013-2144
CVE-2013-0168
·
تاريخ النشر
2013-03-12
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Red Hat Enterprise Virtualization Manager (RHEV-M) versions 3.1 and earlier
Description
The issue is related to the MoveDisk command, which does not properly check permissions on storage domains. This allows remote authenticated storage admins to cause a denial of service by consuming free space of other storage domains.
Recommendations
For versions 3.1 and earlier, consider restricting access to the MoveDisk command to prevent unauthorized use until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾