rhevm-setup vulnerabilities (Red Hat)
26 vulnerabilities.
-
rhevm-setupRed Hat linux-4.9 - security update 5.5 Medium -
rhevm-setupRed Hat oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,... 7.5 High -
rhevm-setupRed Hat The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated... 6.5 Medium -
rhevm-setupRed Hat Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... 5.5 Medium -
rhevm-setupRed Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... 2.1 Low -
rhevm-setupRed Hat Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... 6.8 Medium -
rhevm-setupRed Hat oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the... 5.0 Medium -
rhevm-setupRed Hat Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote... 6.8 Medium -
rhevm-setupRed Hat The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... 6.5 Medium -
rhevm-setupRed Hat The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows... 4.3 Medium -
rhevm-setupRed Hat Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows... 6.8 Medium -
rhevm-setupRed Hat Improper certificate validation in org.apache.httpcomponents:httpclient 4.3 Medium -
rhevm-setupRed Hat Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient 5.8 Medium -
rhevm-setupRed Hat The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots... 3.5 Low -
rhevm-setupRed Hat The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3... 4.0 Medium -
rhevm-setupRed Hat The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... 4.3 Medium -
rhevm-setupRed Hat Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet... 4.3 Medium -
rhevm-setupRed Hat Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions... 5.0 Medium -
rhevm-setupRed Hat The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does... 4.0 Medium -
rhevm-setupRed Hat The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ... 2.1 Low -
rhevm-setupRed Hat Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage... 2.1 Low -
rhevm-setupRed Hat The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly... 2.7 Low -
rhevm-setupRed Hat The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a... 6.8 Medium -
rhevm-setupRed Hat Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV... 6.2 Medium -
rhevm-setupRed Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy 5.0 Medium -
rhevm-setupRed Hat Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy 5.0 Medium