Vulnerability Description
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Virtualization Manager | <= 3.5.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2015-0888.htmlVendor Advisory
- http://www.securitytracker.com/id/1032231
- http://rhn.redhat.com/errata/RHSA-2015-0888.htmlVendor Advisory
- http://www.securitytracker.com/id/1032231
FAQ
What is CVE-2015-0237?
CVE-2015-0237 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to...
How severe is CVE-2015-0237?
CVE-2015-0237 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0237?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization Manager.