CVE-2011-4316: Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not...

Security readout for executives and security teams

This issue affects older Red Hat Enterprise Virtualization Manager deployments. Under unspecified conditions, a VM desktop may not lock between SPICE sessions, allowing one local VM user to see or access another user's desktop session. Exposure is most likely in legacy RHEV-M environments before version 3.1 where multiple users access VM consoles through SPICE. The provided data does not identify other affected products. Prioritize if the organization still runs legacy RHEV-M with shared VM access. The business risk is unauthorized viewing or use of another user's desktop session, but evidence of internet-scale or active exploitation is not provided. Mitigation focus: Upgrade RHEV-M to 3.1 or later where applicable.; Review Red Hat advisories RHSA-2012:1506 and RHSA-2012:1508.; Limit VM console access to authorized users only..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.