CVE-2019-3879
Last modified
CVE-2019-3879 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.
Description
It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ovirt | Ovirt | < 4.3.2.1 |
| Redhat | Virtualization | 4.2 |
References
- http://www.securityfocus.com/bid/107561Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0802Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3879Issue Tracking, Third Party Advisory
- http://www.securityfocus.com/bid/107561Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0802Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3879Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-3879?
How severe is CVE-2019-3879?
How do I fix CVE-2019-3879?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-3873It was found that Picketlink as shipped with Jboss Enterpris…6.4
- CVE-2019-3874The SCTP socket buffer used by a userspace application is no…6.5
- CVE-2019-3875A vulnerability was found in keycloak before 6.0.2. The X.50…6.5
- CVE-2019-3876A flaw was found in the /oauth/token/request custom endpoint…6.3
- CVE-2019-3877A vulnerability was found in mod_auth_mellon before v0.14.2.…5.8
- CVE-2019-3878A vulnerability was found in mod_auth_mellon before v0.14.2.…8.1
- CVE-2019-3880A flaw was found in the way samba implemented an RPC endpoin…5.4
- CVE-2019-3881Bundler prior to 2.1.0 uses a predictable path in /tmp/, cre…7.8
- CVE-2019-3882A flaw was found in the Linux kernel's vfio interface implem…5.5
- CVE-2019-3883In 389-ds-base up to version 1.4.1.2, requests are handled b…7.5
- CVE-2019-3884A vulnerability exists in the garbage collection mechanism o…5.4
- CVE-2019-3885A use-after-free flaw was found in pacemaker up to and inclu…3.3
Are you affected by CVE-2019-3879?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST