CVE-2013-0168
published 2013-03-12CVE-2013-0168: The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows…
PriorityP417medium4CVSS 2.0
AVNACLAuSCNINAP
EPSS
1.92%
77.5th percentile
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_virtualization_manager | <= 3.1 | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
| redhat | enterprise_virtualization_manager | — | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
vendor_redhat4.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rhev-m: insufficient MoveDisk target domain permission checks
vendor_redhat·2013-02-04·CVSS 4.0
CVE-2013-0168 [MEDIUM] rhev-m: insufficient MoveDisk target domain permission checks
rhev-m: insufficient MoveDisk target domain permission checks
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.
Package: ovirt-engine-backend (Red Hat Enterprise Virtualization 2) - Not affected
GHSA
GHSA-cw86-5m65-cvg3: The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3
ghsa_unreviewed·2022-05-05
CVE-2013-0168 [MEDIUM] GHSA-cw86-5m65-cvg3: The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3
The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2013-0211.htmlhttp://www.securityfocus.com/bid/57750http://www.securitytracker.com/id/1028076https://bugzilla.redhat.com/show_bug.cgi?id=893355https://exchange.xforce.ibmcloud.com/vulnerabilities/81834http://rhn.redhat.com/errata/RHSA-2013-0211.htmlhttp://www.securityfocus.com/bid/57750http://www.securitytracker.com/id/1028076https://bugzilla.redhat.com/show_bug.cgi?id=893355https://exchange.xforce.ibmcloud.com/vulnerabilities/81834
2013-03-12
Published