PT-2013-1427 · Red Hat · Red Hat Enterprise Virtualization Manager

David Jorm · Publicado 2013-01-04 · Atualizado 2013-01-07 · CVE-2011-4316

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Manager (RHEV-M) versions prior to 3.1

Description The issue allows local users with access to a virtual machine to gain access to other users' desktop sessions under certain conditions, due to the desktop screen not being locked between SPICE sessions.

Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4316

RHSA-2012:1506

Produtos afetados

Red Hat Enterprise Virtualization Manager

Referências · 6

• http://securityfocus.com/bid/56825 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=754876 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1506.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-1508.html · Aviso do Fabricante
• http://securitytracker.com/id?1027838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4316 · Nota de Segurança