CVE-2010-2224

CVE-2010-2224 describes a vulnerability in Red Hat Enterprise Virtualization Manager (RHEV-M) versions prior to 2.2, where improper handling of the postzero parameter during snapshot merging operations on deleted volumes could expose sensitive data. A local guest OS user could exploit this by examining disk blocks previously associated with a deleted virtual machine, potentially recovering confidential information. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), this vulnerability has low severity, requiring local access and low attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.