{"id":"CVE-2014-0151","aliases":["EUVD-2014-0210","GHSA-64m5-2h4c-p759","RHSA-2015:0158"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote...","description":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00644,"percentile":0.5114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2015-02-13T15:00:00Z","modified":"2026-08-09T10:01:38Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-allinone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4}],"products":[{"vendor":"redhat","product":"ovirt-engine"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077441","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0158.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.ovirt.org/OVirt_3.5_Release_Notes","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0151","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081849","tags":["report"]},{"url":"https://github.com/advisories/GHSA-64m5-2h4c-p759"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=879077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=912057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=918138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=922377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=928727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=947965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=955235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=961753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=967466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=999975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1001419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1003785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1007133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1008512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1013670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1014326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1015186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1022795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1028387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1029934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1040952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1048019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1059435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1061156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1080144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1111551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1119922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1125834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1126839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1130076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1133938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1156577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160889","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0158.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6153","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0151","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3577","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0151","description":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T09:05:38.829Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0210","description":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T09:05:38Z","updated_at":"2026-11-03T01:57:22.468358Z"}],"ghsa":[{"id":"GHSA-64m5-2h4c-p759","title":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote...","description":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.","status":"published","published":"2022-05-13T01:30:40Z","modified":"2023-02-10T05:06:43Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2014-0151","description":"Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.","status":"published","published":"2015-02-13T15:59:01.83Z","modified":"2026-06-17T00:02:23.553Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"RHSA-2015:0158","title":"Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0","status":"published","published":"2024-09-13T09:20:59Z","modified":"2026-08-09T10:01:38Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"}]}}