CVE-2019-3831CWE-863

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8

Medium · published March 25, 2019

CVSS v3.0
6.4
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

The record
Technical detail
CVSS v3.0
6.4 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01029 · 63.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-03-25T17:12Z
EPSS history
Timeline
  • 25 MAR 17:12Z
    A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8
    cvelistv5