CVE-2015-1841: Undefined Security Weakness

The Web Admin interface in Red Hat Enterprise Virtualization Manager RHEV-M allows local users to bypass the timeout function by selecting a VM in the VM grid view...

PT-2015-5465

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Manager RHEV-M affected versions not specified Description The issue allows local users to bypass the timeout function in the Web Admin interface by selecting a VM in the VM grid view. Recommendations At the...

RHEL 6 : rhevm-spice-client (RHSA-2015:0197)

Updated rhevm-spice-client packages that fix two security issues and several bugs are now available for Red Hat Enterprise Virtualization Manager 3. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Red Hat Enterprise Virtualization Manager Very Long Snapshot Chain Denial of Service Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager failed to set the correct snapshot creation permissions during a hot storage migration between two domains, allowing an authenticated...

Red Hat Enterprise Virtualization Manager Sensitive Information Read Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager insecurely sets permissions on the shared directory of the plug-in and ovirt-engine-dwhd service during service startup, allowing local...

PT-2015-4547 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Manager versions prior to 3.5.1 Description: The issue allows local users to obtain sensitive information by reading files in a directory due to weak permissions on the directories shared by the...

RHEL 6 : Virtualization Manager (RHSA-2015:0888)

Red Hat Enterprise Virtualization Manager 3.5.1 is now available. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links ...

Important: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Updated qemu-kvm-rhev packages that fix one security issue and one bug are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Important: Red Hat Security Advisory: rhevm-spice-client security, bug fix, and enhancement update

Updated rhevm-spice-client packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Virtualization Manager 3. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

Important: Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Updated qemu-kvm-rhev packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring Syste...

RHEL 6 : rhevm (RHSA-2012:0421)

Updated rhevm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the...

RHEL 6 : rhevm (RHSA-2013:1210)

Updated rhevm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the...

RHEL 6 : Virtualization Manager (RHSA-2014:0038)

Red Hat Enterprise Virtualization Manager 3.3 is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

RHEL 6 : rhevm (RHSA-2014:0814)

Updated rhevm packages that fix one security issue are now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

RHEL 6 : rhevm (RHSA-2014:0506)

Red Hat Enterprise Virtualization Manager 3.4 is now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CV...

RHEL 6 : Virtualization Manager (RHSA-2012:1537)

An updated jasperreports-server-pro package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHEL 6 : Virtualization Manager (RHSA-2013:0888)

Red Hat Enterprise Virtualization Manager 3.2 is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE link in the...

Low: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Updated qemu-kvm-rhev packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2014-3573

The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML Externa...

CVE-2014-3573: Improper Input Validation

The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML Externa...