Session fixation

2014-09-0814:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.7%

JSON

Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

CPENameOperatorVersion
ovirtle3.4.0
ovirt-engineeq3.0.0
ovirt-engineeq3.1.0
ovirt-engineeq3.2.0
ovirt-engineeq3.3.0
ovirt-engineeq3.3.2 rc1
ovirt-engineeq3.3.3
ovirt-engineeq3.3.4
ovirt-engineeq3.3.5
ovirt-engineeq3.4.0 rc1

Name	Operator	Version
ovirt	le	3.4.0
ovirt-engine	eq	3.0.0
ovirt-engine	eq	3.1.0
ovirt-engine	eq	3.2.0
ovirt-engine	eq	3.3.0
ovirt-engine	eq	3.3.2 rc1
ovirt-engine	eq	3.3.3
ovirt-engine	eq	3.3.4
ovirt-engine	eq	3.3.5
ovirt-engine	eq	3.4.0 rc1

References

gerrit.ovirt.org/

www.ovirt.org/Security_advisories