Red Hat Security Advisory

RHSA-2017:3427

org.ovirt.engine-root security, bug fix, and enhancement update

Released 2017-12-12 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Virtualization Manager 4.1 ovirt-engine-4.1.8.2-0.1.el7, ovirt-engine-backend-4.1.8.2-0.1.el7, ovirt-engine-dbscripts-4.1.8.2-0.1.el7 +17

Fixes 1 record

TI-2016-05427 CVE-2016-6338 · GHSA-w4h4-7mqm-9j6c

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M)…

LOW 31

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors rela…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00519 Published 2017-04-20 Partial fix CWE-284