Vulnerability Description
The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting a VM in the VM grid view.
CVSS Score
3.7
LOW
AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Virtualization | 3.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2015-1713.htmlVendor Advisory
- http://www.securitytracker.com/id/1033459
- http://rhn.redhat.com/errata/RHSA-2015-1713.htmlVendor Advisory
- http://www.securitytracker.com/id/1033459
FAQ
What is CVE-2015-1841?
CVE-2015-1841 is a vulnerability with a CVSS score of 3.7 (LOW). The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting a VM in the VM grid view.
How severe is CVE-2015-1841?
CVE-2015-1841 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1841?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization.