CVE-2014-0151

Mô tả

Tham khảo

• rhn.redhat.com/errata/RHSA-2015-0158.html
• ovirt.org/OVirt_3.5_Release_Notes · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi

Lỗ hổng khác của ovirt-engine

• CVE-2020-10775TRUNG BÌNH 5.3An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arb…
• CVE-2017-7510CAO 8.8In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.
• CVE-2018-1000095TRUNG BÌNH 4.8oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin app…
• CVE-2018-1062TRUNG BÌNH 5.3A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks…
• CVE-2014-7851CAO 7.5oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users wi…