NVD

Id
42925  
Name
CVE-2012-0860  
Description
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-04  
Modified Date
2013-01-11  
Seq
2012-0860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216049 42925 CVE-2012-0860 RHSA-2012:1506  View
216050 42925 CVE-2012-0860 RHSA-2012:1508  View
216051 42925 CVE-2012-0860 56825  View
216052 42925 CVE-2012-0860 1027838  View
216053 42925 CVE-2012-0860 enterprise-rhev-priv-esc(80543)  View
216054 42925 CVE-2012-0860 https://bugzilla.redhat.com/show_bug.cgi?id=790730  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30177 JVNDB-2012-005884 Red Hat Enterprise Virtualization Manager における権限を取得される脆弱性 Red Hat Enterprise Virtualization Manager (RHEV-M) には、検索パスに関する処理に不備があるため、ホストを追加する際、権限を取得される脆弱性が存在します。 CVE-2012-0860 54098 CVE-2012-0860 42925 6.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005884.html 2012-12-04 2013-01-08 View