Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ovirt-engine:3.3:rc2:*:*:*:*:*:*

part: a version: 3.3 update: rc2

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOvirt Engine (3cebeb14-e7cc-58d2-b505-75b70778618b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ovirt/ovirt-engine purl2cpe 2026-06-01 10:12:52.672891
pkg:maven/org.ovirt.engine.sdk/ovirt-engine-sdk-java purl2cpe 2026-06-01 10:12:52.672892
pkg:rpm/fedora/ovirt-engine purl2cpe 2026-06-01 10:12:52.672893

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7851 vulnerable 2026-06-08 05:06:00.249584 Details available
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.
Published: 2017-10-16T15:00:00.000Z
Updated: 2024-08-06T13:03:27.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.