rhevm vulnerabilities (Red Hat)
32 vulnerabilities.
-
rhevmRed Hat In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be... 8.8 High -
rhevmRed Hat ovirt-engine Logs Plaintext Passwords To File 7.2 High -
rhevmRed Hat linux-4.9 - security update 5.5 Medium -
rhevmRed Hat ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to... 7.7 High -
rhevmRed Hat A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable... 5.3 Medium -
rhevmRed Hat oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... 7.5 High -
rhevmRed Hat The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... 6.5 Medium -
rhevmRed Hat ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for... 6.8 Medium -
rhevmRed Hat Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... 5.5 Medium -
rhevmRed Hat The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0... 3.3 Low -
rhevmRed Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... 2.1 Low -
rhevmRed Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... 6.8 Medium -
rhevmRed Hat oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the... 5.0 Medium -
rhevmRed Hat Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... 6.8 Medium -
rhevmRed Hat The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... 6.5 Medium -
rhevmRed Hat The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows... 4.3 Medium -
rhevmRed Hat Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows... 6.8 Medium -
rhevmRed Hat Improper certificate validation in org.apache.httpcomponents:httpclient 4.3 Medium -
rhevmRed Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient 5.8 Medium -
rhevmRed Hat The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots... 3.5 Low -
rhevmRed Hat The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3... 4.0 Medium -
rhevmRed Hat The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... 4.3 Medium -
rhevmRed Hat Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet... 4.3 Medium -
rhevmRed Hat Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions... 5.0 Medium -
rhevmRed Hat The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does... 4.0 Medium -
rhevmRed Hat The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ... 2.1 Low -
rhevmRed Hat Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage... 2.1 Low -
rhevmRed Hat The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly... 2.7 Low -
rhevmRed Hat The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a... 6.8 Medium -
rhevmRed Hat Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV... 6.2 Medium -
rhevmRed Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy 5.0 Medium -
rhevmRed Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy 5.0 Medium