CVE-2010-2223

First published: Wed Jun 16 2010(Updated: )

A flaw was found in the way the Virtual Desktop Server Manager (VDSM) handled the removal of a virtual machine's (VM) data back end (such as an image or a volume). When removing an image or a volume, it was not securely deleted from its corresponding data domain as expected. A guest user in a new, raw VM, created in a data domain that has had VMs deleted from it, could use this flaw to read limited data from those deleted VMs, potentially disclosing sensitive information.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/first-publish-date
• agent/type
• agent/remedy
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/last-modified-date
• agent/author
• agent/references
• agent/weakness
• agent/tags
• agent/description
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2010-2223
• vendor/redhat
• canonical/redhat enterprise virtualization hypervisor
• version/redhat enterprise virtualization hypervisor/5.4-2.1