Approved changes feed: RSS · Atom

cpe:2.3:a:ovirt:ovirt:3.3.2:*:*:*:*:*:*:*

part: a version: 3.3.2 update: *

VendorOvirt (3d6c0cbf-5339-5078-9faf-7b56db6ea300)
ProductOvirt (d3e8d4e0-951d-5d45-b2dd-5bde9a058b88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ovirt/ovirt-engine purl2cpe 2026-06-01 10:13:25.157682

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7851 vulnerable 2026-06-08 05:06:00.245888 Details available
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.
Published: 2017-10-16T15:00:00.000Z
Updated: 2024-08-06T13:03:27.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.