CVE-2012-2696

CVE-2012-2696 describes a privilege escalation vulnerability in Red Hat Enterprise Virtualization Manager (RHEV-M) versions prior to 3.1. Authenticated remote attackers can exploit this flaw by sending crafted SOAP or GWT requests to query arbitrary information due to improper privilege checks in the backend. With a CVSS score of 2.7, this vulnerability is considered low severity, requiring network access and authentication for exploitation, and primarily impacting confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.