{"id":"CVE-2014-0154","aliases":["EUVD-2014-0213","GHSA-3mxr-r8gm-qxvv","RHSA-2015:0158"],"status":"published","title":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the...","description":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01742,"percentile":0.77895,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2015-02-13T15:00:00Z","modified":"2026-08-09T10:01:38Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-allinone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4}],"products":[{"vendor":"ovirt","product":"ovirt"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-0158.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077450","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0154","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081896","tags":["report"]},{"url":"https://github.com/advisories/GHSA-3mxr-r8gm-qxvv"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=879077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=912057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=918138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=922377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=928727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=947965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=955235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=961753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=967466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=999975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1001419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1003785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1007133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1008512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1013670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1014326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1015186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1022795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1028387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1029934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1040952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1048019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1059435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1061156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1080144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1111551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1119922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1125834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1126839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1130076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1133938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1156577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160889","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0158.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0151","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3577","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0154","description":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T09:05:39.17Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0213","description":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","status":"published","published":"2015-02-13T15:00:00Z","modified":"2024-08-06T09:05:39Z","updated_at":"2026-11-03T01:57:22.468358Z"}],"ghsa":[{"id":"GHSA-3mxr-r8gm-qxvv","title":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the...","description":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","status":"published","published":"2022-05-17T04:15:49Z","modified":"2023-02-10T05:06:56Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2014-0154","description":"oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.","status":"published","published":"2015-02-13T15:59:03.313Z","modified":"2026-06-17T00:02:23.853Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"RHSA-2015:0158","title":"Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0","status":"published","published":"2024-09-13T09:20:59Z","modified":"2026-08-09T10:01:38Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"}]}}