CVE-2013-0293

CWE-269 — Improper Privilege Management5 documents5 sources
Severity
7.8HIGH
EPSS
0.1%
top 67.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ovirt Node Ovirt NodeOvirt Node
Timeline
PublishedDec 10
Latest updateMay 5

Description

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDovirt/node2.6.0-1
▶CVEListV5ovirt_node/ovirt_node2.6.0

🔴Vulnerability Details

2
GHSA
GHSA-9p5c-4wp5-6336: oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation↗2022-05-05
▶
CVEList
CVE-2013-0293: oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation↗2019-12-10
▶

📋Vendor Advisories

1
Red Hat
rhev: rhev-h: Lock screen accepts F2 to drop to shell↗2013-02-28
▶

💬Community

1
Bugzilla
CVE-2013-0293 rhev: rhev-h: Lock screen accepts F2 to drop to shell↗2013-02-15
▶
CVE-2013-0293 (HIGH CVSS 7.8) | oVirt Node: Lock screen accepts F2 | cvebase.io