CVE-2012-0860

CVE-2012-0860 describes multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) prior to version 3.1. Specifically, when adding a host, local users could exploit this by introducing a malicious deployUtil.py or vds_bootstrap.py Python module in the /tmp/ directory to gain elevated privileges. The vulnerability has a CVSS score of 6.2, indicating a moderate severity, with a local attack vector and high attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in common repositories like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.