CVE Feed

    Dashboard / CVE / CVE-2015-0237

    CVE-2015-0237

    Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.

    Published:Feb 4, 2015
    Last Modified:Apr 12, 2025
    EPS:May 1, 2015
    EPSS Score:0.00418
    CVSS Score:6.8

    Affected Products

    Vendor
    Redhat
    Product
    Enterprise Virtualization Manager
    Vendor
    Redhat
    Product
    Rhev Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-1072 (CVSS 5) — ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engin…
    CVE-2018-8897 (CVSS 7.8) — A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manua…
    CVE-2015-7544 (CVSS 9.1) — redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows r…
    CVE-2015-5293 (CVSS 5.9) — Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when …
    CVE-2015-0257 (CVSS 2.1) — Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared …
    CVE-2014-3573 (CVSS 6.5) — The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "i…
    CVE-2013-6434 (CVSS 4.3) — The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE …
    CVE-2013-2144 (CVSS 5) — Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the targe…
    CVE-2013-0168 (CVSS 4) — The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly c…
    CVE-2012-6115 (CVSS 2.1) — The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 an…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High