medium6.8
CVE-2014-0152
Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Impact
Session fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovirt | Ovirt | through 3.4.0 |
| Redhat | Ovirt-Engine | Versions 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.3.2, 3.3.3 |