CVE-2014-0152
Published Sep 8, 2014
Last updated 2 years ago
Overview
- Description
- Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ovirt:ovirt:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6192BAD-EC59-47F8-98CD-CB8DE4698135",
"versionEndIncluding": "3.4.0"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68EF6C38-6D25-4570-9FA2-816D62DD9041"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB2F4A5B-5A1E-445D-9115-FAF43FD77D9E"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D45BE5C5-3B72-4BB1-93EA-95AD0F954DB8"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2C92604-65A4-41A2-B241-60D1F9FD2E6E"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.3.2:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1702F2DD-A0BF-441D-83E1-006C90CB2C30"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5AE4721-322E-4CB0-AD6F-E5BF5AF1C8AF"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2609DF24-7688-4D3E-A3B4-F5FAF9BFEA5B"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDDFA2AA-CB4D-4037-902A-248014BEE86B"
},
{
"criteria": "cpe:2.3:a:redhat:ovirt-engine:3.4.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94875BBF-C98F-40A2-AB82-F7DB9A34DB04"
}
],
"operator": "OR"
}
]
}
]