1. Home
  2. CVE Database
  3. CVE-2013-2144
MEDIUM · 5.0

CVE-2013-2144

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumpt...

Vulnerability Description

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
RedhatEnterprise Virtualization Manager<= 3.1

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2013-2144?

CVE-2013-2144 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumpt...

How severe is CVE-2013-2144?

CVE-2013-2144 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-2144?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization Manager.