PT-2015-3596 · Ovirt · Ovirt Engine

Name of the Vulnerable Software and Affected Versions: oVirt Engine versions prior to 3.5.0 beta2 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that perform unspecified actions via a REST API request. Recommendations: For...