CVE-2013-2151
published 2014-01-21CVE-2013-2151: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted…
PriorityP425high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.41%
33.5th percentile
Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_virtualization | — | — |
| redhat | enterprise_virtualization | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rhevm: rhev agent service unquoted search path
vendor_redhat·2013-06-10·CVSS 7.2
CVE-2013-2151 [HIGH] CWE-428 rhevm: rhev agent service unquoted search path
rhevm: rhev agent service unquoted search path
Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.
Package: rhev-guest-tools (Red Hat Enterprise Virtualization 3) - Will not fix
GHSA
GHSA-cjfj-w787-52mw: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3
ghsa_unreviewed·2022-05-17
CVE-2013-2151 [HIGH] GHSA-cjfj-w787-52mw: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3
Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.
No detection rules found.
No public exploits indexed.
2014-01-21
Published