CVE-2012-5516

Red Hat Enterprise Virtualization Manager <3.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56825
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1506.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80546
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027838

Scores

EPSS 0.0035
EPSS Percentile 27.3%

Details

CWE
CWE-200
Status published
Products (5)
redhat/enterprise_virtualization_manager 2.1
redhat/enterprise_virtualization_manager 2.2
redhat/enterprise_virtualization_manager 2.2.3
redhat/enterprise_virtualization_manager 2.2.4
redhat/enterprise_virtualization_manager < 3.0
Published Jan 04, 2013
Tracked Since Feb 18, 2026