Read the docs
TI-2024-00759 Aliases CVE-2024-0822GHSA-4vwj-x32h-m4vj

Ovirt: authentication bypass

Priority MEDIUM 40CWE-1390Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-287.

Summary

An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00708 53rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed ovirt-engine: 4.5.6Red Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ovirt-engine4.5.0 to before 4.5.64.5.6Patch availableCNA
Red HatRed Hat Virtualization Engine 4.4—4.5.3.10-1.el8evPatch availableCNA
  • ovirt-engine Vendor— Affected 4.5.0 to before 4.5.6 Fixed in 4.5.6 Patch available CNA
  • Red Hat Virtualization Engine 4.4 VendorRed Hat Affected — Fixed in 4.5.3.10-1.el8ev Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:ovirt:ovirt-engine:-:*:*:*:*:*:*:*not specified by NVDVulnerableoVirt
  • cpe:2.3:a:ovirt:ovirt-engine:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·oVirt

Remediation

  • Fix · CNA ovirt-engine Fixed in 4.5.6

Red Hat 1 advisory

  • RHSA-2024:0934 Released 2024-02-21 · Red Hat rating Important
    Red Hat Virtualization security and bug fix update
    • RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.5.3.10-1.el8ev, ovirt-engine-backend-4.5.3.10-1.el8ev, ovirt-engine-dbscripts-4.5.3.10-1.el8ev +17

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4Fixed RHSA-2024:0934

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-0822
  2. 2026-10-03 Alias added: GHSA-4vwj-x32h-m4vj

References

Exploit 1

Advisory 2

Other 1

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences