CVE-2011-4316 | Date: (C)2013-01-07 (M)2023-12-22 |
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecified vectors.
CVSS Score and Metrics +CVSS Score and Metrics -CVSS V2 Severity: |
CVSS Score : 3.7 |
Exploit Score: 1.9 |
Impact Score: 6.4 |
|
CVSS V2 Metrics: |
Access Vector: LOCAL |
Access Complexity: HIGH |
Authentication: NONE |
Confidentiality: PARTIAL |
Integrity: PARTIAL |
Availability: PARTIAL |
| |