Red Hat Security Advisory

RHSA-2014:1161

Red Hat Enterprise Virtualization Manager 3.4.2 update

Released 2014-09-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEV-M 3.4 rhevm-3.4.2-0.2.el6ev, rhevm-backend-3.4.2-0.2.el6ev, rhevm-dbscripts-3.4.2-0.2.el6ev +12

Fixes 1 record

TI-2014-02897 CVE-2014-3573 · GHSA-6whg-r3w4-fhjh

The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager…

LOW 32

The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01762 Published 2014-10-18 Partial fix CWE-20