Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17

Export CSV
CVE-2024-7259

Ovirt-engine: potential exposure of cleartext provider passwords via web ui

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager Virtualization
CVE-2024-0822

Ovirt: authentication bypass

An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager
CVE-2022-0847

kernel: improper initialization of the "flags" member of the new pipe_buffer

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS 92.8% KEV · Listed
Vendors
Fedoraproject Linux Netapp and 4 more
Products
Fedora Linux Kernel H300e and 39 more
CVE-2014-7851

ovirt-engine-webadmin: does not invalidate all sessions upon logout

oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Ovirt-engine Rhev Manager
CVE-2016-3077

ovirt-engine: Crash of API when parsing unxepected version number

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Rhev Manager
CVE-2016-3113

ovirt-engine: Reflected XSS when submitting config file for VNC/SPICE Connection

Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.

CVSS 3.1 · 6.1 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine
CVE-2014-0151

ovirt-engine: cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack the authentication of users for requests that perform unspecified actions via a REST API request.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Rhev Manager
CVE-2014-0152

ovirt-engine-webadmin: session fixation

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Ovirt-engine Rhev Manager
CVE-2020-35497

ovirt-engine: non-admin user is able to access other users public SSH key

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager Virtualization
CVE-2020-14333

ovirt-engine: Reflected cross site scripting vulnerability

A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager
CVE-2020-10775

ovirt-engine: Redirect to arbitrary URL allows for phishing

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Virtualization Ovirt-engine Rhev Manager
CVE-2019-19336

ovirt-engine: response_type parameter allows reflected XSS

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager Virtualization
CVE-2018-1073

ovirt-engine: account enumeration through login to web console

The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Enterprise Linux Virtualization and 1 more
CVE-2018-1062

ovirt-engine: When Wipe After Delete (WAD) and Enable Discard are both enabled for a VM disk, discarded data might not be wiped after the disk is removed.

A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Rhev Manager
CVE-2018-1000095

ovirt-engine: stored XSS in snapshot description and comment

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine
CVE-2017-7510

4: ovirt-engine exposes cloud-init root password via REST API

In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Rhev Manager
CVE-2015-1780

oVirt: Users with MANIPULATE_STORAGE_DOMAIN can attach a storage domain to any data-center

oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Ovirt-engine Virtualization