CVEvulnerability

CVE-2012-0860

6.2 MEDIUM Published 2013-01-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.

Affected configurations

• redhat enterprise virtualization manager (<= 3.0) • redhat enterprise virtualization manager 2.1 • redhat enterprise virtualization manager 2.2 • redhat enterprise virtualization manager 2.2.3

References