CVE-2019-3831

MEDIUM

ovirt vdsm 4.19-4.30.3 4.30.5-4.30.8 - Authenticated Remote Code Execution via systemd_run Function

Title source: llm

Description

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

References (1)

Core 1

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3831

Scores

CVSS v3 6.7

EPSS 0.0009

EPSS Percentile 26.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-863

Status published

Products (2)

ovirt/vdsm 4.19 - 4.30.3

redhat/gluster_storage 3.0

Published Mar 25, 2019

Tracked Since Feb 18, 2026