rhevm-backend vulnerabilities (Red Hat)

26 vulnerabilities.

• rhevm-backend Red Hat linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• rhevm-backend Red Hat oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... CVE-2014-7851 Fix available 7.5 HighOctober 16, 2017
• rhevm-backend Red Hat The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... CVE-2016-3077 Fix available 6.5 MediumJune 6, 2017
• rhevm-backend Red Hat Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... CVE-2016-4443 Fix available 5.5 MediumDecember 14, 2016
• rhevm-backend Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... CVE-2015-0257 2.1 LowMay 1, 2015
• rhevm-backend Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... CVE-2015-0237 6.8 MediumMay 1, 2015
• rhevm-backend Red Hat oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the... CVE-2014-0154 5.0 MediumFebruary 13, 2015
• rhevm-backend Red Hat Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... CVE-2014-0151 6.8 MediumFebruary 13, 2015
• rhevm-backend Red Hat The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... CVE-2014-3573 Fix available 6.5 MediumOctober 18, 2014
• rhevm-backend Red Hat The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows... CVE-2014-0153 4.3 MediumSeptember 8, 2014
• rhevm-backend Red Hat Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows... CVE-2014-0152 6.8 MediumSeptember 8, 2014
• rhevm-backend Red Hat Improper certificate validation in org.apache.httpcomponents:httpclient CVE-2012-6153 Fix available 4.3 MediumAugust 25, 2014
• rhevm-backend Red Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient CVE-2014-3577 Fix available 5.8 MediumAugust 21, 2014
• rhevm-backend Red Hat The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots... CVE-2014-3559 Fix available 3.5 LowAugust 6, 2014
• rhevm-backend Red Hat The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3... CVE-2014-3485 Fix available 4.0 MediumJuly 11, 2014
• rhevm-backend Red Hat The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... CVE-2013-6434 Fix available 4.3 MediumJanuary 24, 2014
• rhevm-backend Red Hat Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet... CVE-2013-4181 Fix available 4.3 MediumSeptember 16, 2013
• rhevm-backend Red Hat Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions... CVE-2013-2144 Fix available 5.0 MediumJuly 3, 2013
• rhevm-backend Red Hat The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does... CVE-2013-0168 4.0 MediumMarch 12, 2013
• rhevm-backend Red Hat The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ... CVE-2012-6115 2.1 LowMarch 12, 2013
• rhevm-backend Red Hat Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage... CVE-2012-5516 2.1 LowJanuary 4, 2013
• rhevm-backend Red Hat The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly... CVE-2012-2696 2.7 LowJanuary 4, 2013
• rhevm-backend Red Hat The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a... CVE-2012-0861 Fix available 6.8 MediumJanuary 4, 2013
• rhevm-backend Red Hat Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV... CVE-2012-0860 6.2 MediumJanuary 4, 2013
• rhevm-backend Red Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy CVE-2012-0818 Fix available 5.0 MediumNovember 23, 2012
• rhevm-backend Red Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy CVE-2011-5245 Fix available 5.0 MediumNovember 23, 2012