CVE-2012-5516
low
CVSS v3
—
CVSS v2
2.1
VIR risk
2.1
Description
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2012-1506.html
References
- http://rhn.redhat.com/errata/RHSA-2012-1506.html
- http://www.securityfocus.com/bid/56825
- http://www.securitytracker.com/id?1027838
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80546
- http://rhn.redhat.com/errata/RHSA-2012-1506.html
- http://www.securityfocus.com/bid/56825
- http://www.securitytracker.com/id?1027838
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80546
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.