rhevm-lib vulnerabilities (Red Hat)

16 vulnerabilities.

• rhevm-lib Red Hat linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.4% 5.5 MediumMay 21, 2018
• rhevm-lib Red Hat oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... CVE-2014-7851 Fix available 7.5 HighOctober 16, 2017
• rhevm-lib Red Hat The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... CVE-2016-3077 Fix available 6.5 MediumJune 6, 2017
• rhevm-lib Red Hat Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... CVE-2016-4443 Fix available 5.5 MediumDecember 14, 2016
• rhevm-lib Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... CVE-2015-0257 2.1 LowMay 1, 2015
• rhevm-lib Red Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... CVE-2015-0237 6.8 MediumMay 1, 2015
• rhevm-lib Red Hat oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the... CVE-2014-0154 5.0 MediumFebruary 13, 2015
• rhevm-lib Red Hat Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... CVE-2014-0151 6.8 MediumFebruary 13, 2015
• rhevm-lib Red Hat The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... CVE-2014-3573 Fix available 6.5 MediumOctober 18, 2014
• rhevm-lib Red Hat The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows... CVE-2014-0153 4.3 MediumSeptember 8, 2014
• rhevm-lib Red Hat Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows... CVE-2014-0152 6.8 MediumSeptember 8, 2014
• rhevm-lib Red Hat Improper certificate validation in org.apache.httpcomponents:httpclient CVE-2012-6153 Fix available 4.3 MediumAugust 25, 2014
• rhevm-lib Red Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient CVE-2014-3577 Fix available 5.8 MediumAugust 21, 2014
• rhevm-lib Red Hat The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots... CVE-2014-3559 Fix available 3.5 LowAugust 6, 2014
• rhevm-lib Red Hat The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3... CVE-2014-3485 Fix available 4.0 MediumJuly 11, 2014
• rhevm-lib Red Hat The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... CVE-2013-6434 Fix available 4.3 MediumJanuary 24, 2014