Description
Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 3 | rhevm +14 | 3.4.0-0.21.el6ev | RHSA-2014:0506 |
Advisories 1
- RHSA-2014:0506 Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.4.0 update Red Hat Security Advisories (RHSA) · Jun 29, 2026