Red Hat oVirt Engine 3.3.4 Release Candidate 1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ovirt-engine:3.3.4:rc1:*:*:*:*:*:*

part: a version: 3.3.4 update: rc1

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOvirt Engine (3cebeb14-e7cc-58d2-b505-75b70778618b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ovirt/ovirt-engine purl2cpe 2026-06-01 10:12:52.672866
pkg:maven/org.ovirt.engine.sdk/ovirt-engine-sdk-java purl2cpe 2026-06-01 10:12:52.672867
pkg:rpm/fedora/ovirt-engine purl2cpe 2026-06-01 10:12:52.672869

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7851 vulnerable 2026-06-08 05:06:00.256016 Details available
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.
Published: 2017-10-16T15:00:00.000Z
Updated: 2024-08-06T13:03:27.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.