CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Information Exposure
Summary: a vulnerability was discovered in ovirt 4.1.x before 4.1.9, where the combination of enable discard and wipe after delete flags for vm disks managed by ovirt, could cause a disk to be incompletely zeroed when removed from a vm. if the same storage blocks happen to be later allocated to a new disk attached to another vm, potentially sensitive data could be revealed to privileged users of that vm.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-03-06
Last Modified Date: 2019-11-06