CVE-2013-6434

Published: Jan 24, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.

Affected (6)

Products: Redhat: Enterprise Virtualization Manager

Redhat

1 product

Enterprise Virtualization Manager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Virtualization Manager	Up to 3.2
Redhat Enterprise Virtualization Manager	Version 2.1
Redhat Enterprise Virtualization Manager	Version 2.2.3
Redhat Enterprise Virtualization Manager	Version 2.2
Redhat Enterprise Virtualization Manager	Version 3.0
Redhat Enterprise Virtualization Manager	Version 3.1