Description
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ovirt-engine | ovirt-engine 4.4.3 and earlier | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 4 | rhvm +19 | 4.4.4.7-0.2.el8ev | RHSA-2021:0383 |
Advisories 1
- RHSA-2021:0383 Red Hat Security Advisory: RHV-M (ovirt-engine) 4.4.z security, bug fix, enhancement upd[ovirt-4.4.4] 0-day Red Hat Security Advisories (RHSA) · Jun 27, 2026