CVE-2015-0237 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to...
MediumCVSS 6.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization manager | <= 3.5.0 | No fix listed |
References
- RHSA-2015:0888 vendor-advisory
- 1032231 vdb-entry