Red Hat Bug Fix Advisory: Red Hat Virtualization Manager (ovirt-engine) 4.2.8
ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks
cpe:/a:redhat:rhev_manager:4.2