Description
The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting a VM in the VM grid view.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | rhev-hypervisor7 | 7.1-20150827.1.el7ev | RHSA-2015:1713 |
| RHEL 6 | rhev-hypervisor6 | 6.7-20150828.0.el6ev | RHSA-2015:1713 |
| RHEL 6 | rhev-hypervisor7 | 7.1-20150827.1.el6ev | RHSA-2015:1713 |
Advisories 1
- RHSA-2015:1713 Red Hat Security Advisory: rhev-hypervisor security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 1033459 vdb-entry
- RHSA-2015:1713 vendor-advisory