Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ovirt-engine:3.3:beta1:*:*:*:*:*:*

part: a version: 3.3 update: beta1

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOvirt Engine (3cebeb14-e7cc-58d2-b505-75b70778618b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ovirt/ovirt-engine purl2cpe 2026-06-01 10:12:52.672882
pkg:maven/org.ovirt.engine.sdk/ovirt-engine-sdk-java purl2cpe 2026-06-01 10:12:52.672884
pkg:rpm/fedora/ovirt-engine purl2cpe 2026-06-01 10:12:52.672885

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7851 vulnerable 2026-06-08 05:06:00.248422 Details available
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.
Published: 2017-10-16T15:00:00.000Z
Updated: 2024-08-06T13:03:27.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.