Skip to content
OpenAdvisories
Unscored RHSA-2014:0506 2 CVEs

Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.4.0 update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-backend 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-dbscripts 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-lib 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-restapi 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-base 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-allinone 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-ovirt-engine 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-ovirt-engine-common 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-websocket-proxy 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-tools 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-userportal 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-webadmin-portal 0:3.4.0-0.21.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-websocket-proxy 0:3.4.0-0.21.el6ev

Vulnerabilities 2

  • Unscored —
    CVE-2014-0152

    Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack …

  • Unscored —
    CVE-2014-0153

    The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obt…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.4/html-single/Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=741111
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=818051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=828080
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=856272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=858166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=867794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877747
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=948653
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=953492
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=955429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=957939
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=962180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=969641
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=970488
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=974076
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=977461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=981420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=983088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=999713
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1015185
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1016844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1018847
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1020408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1025295
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026389
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1026980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1027697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1029441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1030122
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1032679
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1036885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1038980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1044089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1044091