CVE-2014-0152
08.09.2014, 14:55
Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ovirt | ovirt | 𝑥 ≤ 3.4.0 |
| redhat | ovirt-engine | 3.0.0 |
| redhat | ovirt-engine | 3.1.0 |
| redhat | ovirt-engine | 3.2.0 |
| redhat | ovirt-engine | 3.3.0 |
| redhat | ovirt-engine | 3.3.2:rc1 |
| redhat | ovirt-engine | 3.3.3 |
| redhat | ovirt-engine | 3.3.4 |
| redhat | ovirt-engine | 3.3.5 |
| redhat | ovirt-engine | 3.4.0:rc1 |
𝑥
= Vulnerable software versions