CVE-2011-4316 in Enterprise Virtualization Manager
Summary
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users desktop sessions via unspecified vectors.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/04/2011
Disclosure
01/04/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 63321 | Red Hat Enterprise Virtualization Manager access control | 264 | Not defined | Official fix | CVE-2011-4316 |