CVE-2013-2151 — Unquoted Search Path or Element in Redhat Enterprise Virtualization

CWE-428 — Unquoted Search Path or Element5 documents5 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 77.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Enterprise Virtualization
Timeline
PublishedJan 21
Latest updateMay 17

Description

Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-cjfj-w787-52mw: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3↗2022-05-17
▶
CVEList
CVE-2013-2151: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3↗2014-01-21
▶

📋Vendor Advisories

1
Red Hat
rhevm: rhev agent service unquoted search path↗2013-06-10
▶

💬Community

1
Bugzilla
CVE-2013-2151 rhevm: rhev agent service unquoted search path↗2013-06-05
▶