Red Hat Enterprise Virtualization (RHEV) 4.0

CPE Details

Red Hat Enterprise Virtualization (RHEV) 4.0
redhat
enterprise_virtualization
4.0
2021-01-05
17h07 +00:00
2021-01-05
17h07 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:redhat:enterprise_virtualization:4.0:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

enterprise_virtualization

Version

4.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2017-2614 2018-07-27 16h00 +00:00 When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts.
6.8
Moyen
CVE-2018-1111 2018-05-17 14h00 +00:00 DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
7.5
Haute
CVE-2018-1074 2018-04-26 15h00 +00:00 ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.
7.7
Haute
CVE-2016-6338 2017-04-20 15h00 +00:00 ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries.
6.8
Moyen
CVE-2016-5432 2016-10-03 16h00 +00:00 The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.
3.3
Bas