CVE-2012-0860

Name: CVE-2012-0860
Creator: NVD / NIST
Published: 2013-01-04T22:55:01.633+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.40%

Last modified Jun 16, 2026

CVE-2012-0860 is a vulnerability of currently unknown severity. Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.

Description

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.

Metrics

EPSS Probability

0.40%

31.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Redhat	Enterprise Virtualization Manager	<= 3.0
Redhat	Enterprise Virtualization Manager	2.1
Redhat	Enterprise Virtualization Manager	2.2
Redhat	Enterprise Virtualization Manager	2.2.3

References

http://rhn.redhat.com/errata/RHSA-2012-1506.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1508.htmlVendor Advisory
http://www.securityfocus.com/bid/56825
http://www.securitytracker.com/id?1027838
https://bugzilla.redhat.com/show_bug.cgi?id=790730Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80543
http://rhn.redhat.com/errata/RHSA-2012-1506.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1508.htmlVendor Advisory
http://www.securityfocus.com/bid/56825
http://www.securitytracker.com/id?1027838
https://bugzilla.redhat.com/show_bug.cgi?id=790730Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80543

Timeline

Published: Jan 4, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-0860?

How severe is CVE-2012-0860?

Severity scoring for CVE-2012-0860 is pending analysis. The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.

How do I fix CVE-2012-0860?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-0860?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST