CVE-2013-6434: Red Hat Enterprise Virtualization Manager

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.

Affected products

• Red Hat Enterprise Virtualization Manager: up to and including 3.2; version 2.1 only; version 2.2 only; version 2.2.3 only; version 3.0 only; version 3.1 only

Published 2014-01-24. Last modified 2026-06-17.