| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise virtualization manager | = 2.1= 2.2= 2.2.3≤ 3.0 |
The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free