CVE Feed

    Dashboard / CVE / CVE-2012-2696

    CVE-2012-2696

    The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.

    Published:Dec 4, 2012
    Last Modified:Apr 11, 2025
    EPS:Jan 4, 2013
    EPSS Score:0.00143
    CVSS Score:2.7

    Affected Products

    Vendor
    Redhat
    Product
    Enterprise Virtualization Manager
    Vendor
    Redhat
    Product
    Rhev Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-1072 (CVSS 5) — ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engin…
    CVE-2018-8897 (CVSS 7.8) — A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manua…
    CVE-2015-7544 (CVSS 9.1) — redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows r…
    CVE-2015-5293 (CVSS 5.9) — Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when …
    CVE-2015-0237 (CVSS 6.8) — Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation…
    CVE-2015-0257 (CVSS 2.1) — Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared …
    CVE-2014-3573 (CVSS 6.5) — The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "i…
    CVE-2013-6434 (CVSS 4.3) — The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE …
    CVE-2013-2144 (CVSS 5) — Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the targe…
    CVE-2013-0168 (CVSS 4) — The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High