Skip to content
OpenAdvisories
Unscored RHSA-2015:0158 4 CVEs

Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0

Published Sep 13, 2024 · Updated Aug 9, 2026

Ecosystem: Red Hat

Fixed packages 17

ReleasePackageFixed in
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-backend 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-dbscripts 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-extensions-api-impl 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-extensions-api-impl-javadoc 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-lib 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-restapi 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-base 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-allinone 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-ovirt-engine 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-ovirt-engine-common 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-setup-plugin-websocket-proxy 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-tools 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-userportal 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-webadmin-portal 0:3.5.0-0.29.el6ev
Red Hat · Rhev Manager 3 rhev_manager:3 rhevm-websocket-proxy 0:3.5.0-0.29.el6ev

Vulnerabilities 4

  • High —
    CVE-2012-6153

    Improper certificate validation in org.apache.httpcomponents:httpclient

    http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-m…

    org.apache.httpcomponents:httpclient commons-httpclient Debian Maven
  • Unscored —
    CVE-2014-0151

    Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack th…

  • Unscored —
    CVE-2014-0154

    oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it…

  • Medium —
    CVE-2014-3577

    Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient

    org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th…

    httpcomponents-client org.apache.httpcomponents:httpclient httpcomponents-client commons-httpclient Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=570191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=716511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=723211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=800155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=804530
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=817180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=828591
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=832167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=859024
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=874328
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=878662
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=879077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=884653
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=890517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=894027
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=894084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=895222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=902298
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=906243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=906938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=912057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=918138
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=920708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=922377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=928727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=947965
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=955235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=961753
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=962220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=962880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=967466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=977079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=977306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=985945
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=987295
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=987299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=988392