Red Hat Security Advisory

RHSA-2021:0383

RHV-M (ovirt-engine) 4.4.z security, bug fix, enhancement upd[ovirt-4.4.4] 0-day

Released 2021-02-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.4.4.7-0.2.el8ev, ovirt-engine-backend-4.4.4.7-0.2.el8ev, ovirt-engine-dbscripts-4.4.4.7-0.2.el8ev +17

Fixes 1 record

TI-2020-18019 CVE-2020-35497 · GHSA-wvmj-h4cr-4hm5

Improper access control in ovirt-engine

LOW 30

A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00763 Published 2020-12-21 Fixed CWE-284